New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice
// SCAN REPORT

Tolpo

243 tools. 179 can modify or destroy data without limits.

16 destructive tools with no built-in limits. Policy required.

Last updated:

179 can modify or destroy data
64 read-only
243 tools total

Community server · catalogue entry checked 14/10/2026

How to control Tolpo ↓

TOOL MAP

What Tolpo exposes to your agents

Read (64) Write / Execute (163) Destructive / Financial (16)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Tolpo tools

Destructive · Critical camera_storage_format Format a camera's memory card. This deletes every recording on it and cannot be undone. Only do it when Destructive · High automation_delete Delete a local rule and its queued actions. Destructive · High camera_ptz_delete_presets Delete selected saved viewpoints after checking they exist. Destructive · High camera_system_reset camera_system_reset

179 of Tolpo's 243 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Tolpo

PolicyLayer is an MCP gateway — it sits between your AI agents and Tolpo, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "automation_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "automation_alerts": {
    "limits": [
      {
        "counter": "automation_alerts_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "automation_list": {
    "limits": [
      {
        "counter": "automation_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Tolpo — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON TOLPO →

Instant setup, no code required.

FULL CATALOGUE

All 243 Tolpo tools

DESTRUCTIVE 16 tools
Destructive automation_delete Delete a local rule and its queued actions. Destructive camera_ptz_delete_presets Delete selected saved viewpoints after checking they exist. Destructive camera_storage_format Format a camera's memory card. This deletes every recording on it and cannot be undone. Only do it when Destructive camera_system_reset camera_system_reset Destructive group_delete Delete a local group without changing any device. Destructive light_delete_rule Delete one on-device lighting rule by id. Destructive pair_remove pair_remove Destructive plug_auto_off_cancel Cancel a running automatic shut-off. The load may stay on longer. Requires confirmation. Destructive plug_energy_clear Permanently erase stored energy statistics. Requires the confirmation phrase naming this device. Destructive plug_rule_delete plug_rule_delete Destructive reset_factory reset_factory Destructive reset_reboot reset_reboot Destructive room_delete Delete a local room without changing any device. Destructive vacuum_remove_schedule Remove one schedule. Does not remove all schedules. Destructive vacuum_reset_consumable vacuum_reset_consumable Destructive vacuum_return_home Send the robot to its charging dock or cancel its return.
EXECUTE 15 tools
Execute automation_dry_run Read current observations and say what would fire now without actions or state changes. Execute automation_tick Evaluate once, run due actions through policy, and report individual failures. Execute camera_ptz_patrol Start or stop an existing camera patrol. Patrol uses battery power. Execute camera_ptz_stop Stop pan and tilt movement now. Sent without any capability read first, so it works even when other reads fail Execute camera_recordings_day List the recorded pieces of one day on a camera's memory card: start, end, length and whether each was Execute camera_system_reboot Restart a supported camera. State refresh may report the expected temporary outage. Execute network_new_destinations network_new_destinations Execute vacuum_clean_rooms Start cleaning selected rooms on an explicit map with global settings. Execute vacuum_empty_bin Start dust collection machinery at a compatible dock. Execute vacuum_preset Start an existing custom preset on its map. Execute vacuum_spot Start spot cleaning around the robot's current position. Execute vacuum_start Start a new whole-home cleaning job. Use vacuum_pause with paused=false to resume. Execute vacuum_stop End the current job. UNVERIFIED on a device: sends setSwitchClean with clean_on=false, as the app's stop does. Execute vacuum_task_group Start a saved task group, the app's task-group cleaning mode 7. Execute valve_maintenance_start Start a KE100 mechanical cycle. Poll valve_settings for calibration or descaling status.
WRITE 148 tools
Write automation_alerts automation_alerts Write automation_create Create a local rule. Actions use the owner's current policy at every execution. Device names in the rule are Write automation_disable Disable a rule and cancel its queued delayed actions. Write automation_enable Enable a rule and lazily start local evaluation while the server runs. Write automation_settings automation_settings Write camera_alarm_light_set camera_alarm_light_set Write camera_alarm_light_switch camera_alarm_light_switch Write camera_alarm_manual camera_alarm_manual Write camera_alarm_set camera_alarm_set Write camera_alarm_triggers_set camera_alarm_triggers_set Write camera_audio_set camera_audio_set Write camera_battery_charging_privacy camera_battery_charging_privacy Write camera_battery_clips camera_battery_clips Write camera_battery_mode camera_battery_mode Write camera_clip_frames camera_clip_frames Write camera_events_recent camera_events_recent Write camera_image_led camera_image_led Write camera_image_mode camera_image_mode Write camera_image_osd camera_image_osd Write camera_image_privacy_zones camera_image_privacy_zones Write camera_ptz_auto_tracking Enable or disable basic target tracking on a supported camera. Write camera_ptz_calibrate Move the camera to its limits to calibrate its motor. Write camera_ptz_cruise Sweep the horizontal or vertical range once, or stop the sweep. Write camera_ptz_patrol_point camera_ptz_patrol_point Write camera_ptz_save_preset Save the current pan and tilt position under a name. Write camera_recordings_days camera_recordings_days Write camera_recordings_events camera_recordings_events Write camera_recordings_plan Show when a camera records to its memory card, per weekday: time windows and whether it records all the Write camera_recordings_set_plan camera_recordings_set_plan Write camera_storage_set_loop Turn loop recording on or off on a camera's memory card. Off means the camera stops recording once the Write camera_system_account_enabled camera_system_account_enabled Write camera_system_auto_update camera_system_auto_update Write camera_system_compatibility camera_system_compatibility Write camera_system_firmware_update Start firmware installation with level 4 confirmation. The camera downloads from the vendor. Write camera_system_privacy camera_system_privacy Write camera_system_reboot_schedule camera_system_reboot_schedule Write camera_system_timezone Set the camera time zone and NTP mode. The camera synchronizes its own clock. Write camera_system_upnp camera_system_upnp Write chime_settings_set chime_settings_set Write chime_sound chime_sound Write device_rename Rename a SMART device, camera or camera protocol hub. Its current tolpo slug stays usable. Write device_set_clock device_set_clock Write device_set_led device_set_led Write device_set_metadata device_set_metadata Write device_third_party_compatibility Explain the account switch that may gate local access. Its value cannot be detected locally. Write doorbell_anti_theft_set doorbell_anti_theft_set Write doorbell_auto_response_set doorbell_auto_response_set Write doorbell_battery_mode_set doorbell_battery_mode_set Write doorbell_button_color_set Change the button LED color at level 2. UNVERIFIED available color names; unsupported names may be refused by Write doorbell_events_recent doorbell_events_recent Write doorbell_existing_chime_set doorbell_existing_chime_set Write doorbell_pre_wake Request pre-wake of a battery doorbell through its parent hub at level 2. UNVERIFIED on H200/D230. Write doorbell_quick_reply doorbell_quick_reply Write doorbell_ring_enabled_set doorbell_ring_enabled_set Write doorbell_ring_plan_set doorbell_ring_plan_set Write doorbell_ring_preview doorbell_ring_preview Write doorbell_ring_sound_set doorbell_ring_sound_set Write doorbell_wake_up_set Change the battery doorbell wake-up trigger at level 2. UNVERIFIED on hardware. Write firmware_install_update firmware_install_update Write firmware_progress Read SMART firmware download and install progress. No polling or retries. Write firmware_set_auto_update firmware_set_auto_update Write group_assign Replace local group members. Devices can belong to several groups. Write group_create Create an empty local group. It does not change Tapo app groups. Write group_rename Rename a local group and keep its members. Write home_overview home_overview Write home_plan_draft Draft a floor plan from the devices tolpo knows: rooms guessed from their names, door and window sensors on Write home_plan_get Read the floor plan of the 3D home view, which devices it places and which it does not, and the plan format. Write home_plan_set Replace the floor plan of the 3D home view. Every value is checked before the owner's file is written; an Write hub_alarm_set hub_alarm_set Write hub_child_rename Rename a sensor or valve through its hub and refresh its state. Its tolpo id stays stable. Write hub_events hub_events Write hub_led_set hub_led_set Write hub_siren hub_siren Write light_add_rule Add a validated schedule, countdown timer, or Away Mode rule. Times use device local time. Write light_custom_effect Apply a validated classic strip effect, including static color painting. Requires light_effect write permissio Write light_edit_preset light_edit_preset Write light_edit_rule Replace a complete existing lighting rule, including its id. Write light_enable_rule Enable or disable a stored rule while preserving its times, days and target state. Write light_set_auto_white Enable or disable circadian, light compensation, or light tracking Auto-White. Write light_set_defaults Change power-on or power-outage defaults. Supports individual light children. Write light_set_effect light_set_effect Write light_set_led Set the indicator LED if this light exposes it. The led write permission still applies. Write light_set_length Set the persistent lit length of a strip. The strip_segments write permission still applies. Write light_set_transition light_set_transition Write lock_state lock_state Write network_allow_only network_allow_only Write network_apply network_apply Write network_block_internet network_block_internet Write network_cloud_dependency Explain app-derived cloud dependencies and expected local behavior. No cloud request. Write network_device_traffic network_device_traffic Write network_rollback network_rollback Write network_rollback_all Break-glass cleanup of tagged tolpo tables, including changes from a previous process. Write pair_hub pair_hub Write pair_name pair_name Write pair_softap_plan pair_softap_plan Write pair_softap_provision pair_softap_provision Write plug_away_set plug_away_set Write plug_countdown_set plug_countdown_set Write plug_default_state_set Set one socket's power-loss behavior. Always-on can energize a heater. UNVERIFIED legacy and v2 write shapes. Write plug_electricity_price_set Set a constant price. Replaces time-of-use mode. UNVERIFIED price scaling; do not interpret as a currency amou Write plug_energy_history plug_energy_history Write plug_identity_set plug_identity_set Write plug_led_set plug_led_set Write plug_location_set plug_location_set Write plug_rule_enable plug_rule_enable Write plug_rules plug_rules Write plug_schedule_set plug_schedule_set Write plug_settings plug_settings Write recorded_history recorded_history Write room_assign Replace room membership. A device belongs to at most one local room. Write room_create Create an empty room in tolpo's local file. Write room_rename Rename a local room and keep its device assignments. Write room_set_power Set room power after checking every member. Report each failed device separately. Write routes routes Write sensor_alarm_set sensor_alarm_set Write sensor_comfort_humidity sensor_comfort_humidity Write sensor_comfort_temperature sensor_comfort_temperature Write sensor_led Set a child sensor LED with led_onoff. Requires firmware support for ble_sensor_led. Write sensor_mode Set T310/T315 reporting mode for responsiveness or battery life. Write sensor_sensitivity sensor_sensitivity Write sensor_siren sensor_siren Write set_feature set_feature Write set_light set_light Write set_power Switch lights and plugs on or off. Cameras, sensors and the hub cannot be switched. Write switch_calibration_set switch_calibration_set Write switch_delay_off_set switch_delay_off_set Write switch_double_click_set switch_double_click_set Write switch_low_power_set Set low-power mode on hardware that reports this setting. UNVERIFIED write of low_power_mode 1 or 0. Write switch_settings Read one hardware setting on a wall switch or dimmer. UNVERIFIED calibration, action, sleep and wiring respons Write vacuum_auto_empty vacuum_auto_empty Write vacuum_child_lock vacuum_child_lock Write vacuum_pause Pause or resume the current job. Write vacuum_preferences vacuum_preferences Write vacuum_set_do_not_disturb vacuum_set_do_not_disturb Write vacuum_set_schedule vacuum_set_schedule Write vacuum_volume Change speaker volume. Write vacuum_zones Clean rectangular zones with per-zone settings. This does not edit the map. Write valve_defaults_set valve_defaults_set Write valve_frost_set valve_frost_set Write valve_night_set valve_night_set Write valve_option_set valve_option_set Write valve_schedule Read compact local KE100 schedule blocks. Preserve firmware temperature encoding. Write valve_schedule_set valve_schedule_set Write valve_shutdown_set valve_shutdown_set Write valve_timed_set valve_timed_set Write valve_window_set valve_window_set Write valve_work_mode_set Set KE100 motor behavior to silent_mode, standard_mode or turbo_mode. Write wifi_join wifi_join
READ 64 tools
Read automation_list List compact local rule summaries and the kill switch state. Read automation_show Show a compact rule summary. Private action parameters are omitted. Read camera_alarm_get Read detection-triggered sound and light alarm settings and capabilities. Read camera_alarm_light_get camera_alarm_light_get Read camera_alarm_status Read the manual alarm status and remaining time. Read camera_alarm_triggers_get Read which device-reported event types trigger the camera alarm. Read camera_audio_read Read microphone, speaker, recording audio and noise processing settings. Read camera_battery_read Read battery settings from an awake, reachable camera. Sleeping cameras may need BLE. Read camera_battery_statistics Read compact daily usage, wake-up counts and solar charging statistics. Read camera_clip_download camera_clip_download Read camera_detect_get camera_detect_get Read camera_detect_notifications_get Read device-side notification switches and interruption levels by event type. Push delivery is cloud. Read camera_detect_notifications_set camera_detect_notifications_set Read camera_detect_schedule_set camera_detect_schedule_set Read camera_detect_set camera_detect_set Read camera_detect_zones_get camera_detect_zones_get Read camera_detect_zones_set camera_detect_zones_set Read camera_image_read Read supported image settings and ranges. Private device fields are omitted. Read camera_ptz_status Read supported camera viewpoints, angle ranges, patrol or tracking. Read camera_snapshot camera_snapshot Read camera_storage_status Show a camera's memory card: its state (normal, unformatted, full, formatting...), size and free space in Read camera_system_firmware_check Ask the camera to check the vendor firmware catalogue. Installs nothing. Read the result with camera_system_re Read camera_system_read Read privacy mode, time, signal, network exposure or firmware state. Login and network identities are hidden. Read camera_thumbnail_get camera_thumbnail_get Read chime_settings_get Read per-doorbell chime settings and available tones, including an H100 or H200 as chime. UNVERIFIED on hardwa Read device_diagnostics Read versions, available signal and runtime counters and components. No secrets or log export. Read device_get_clock Read device time and time zone. Read device_get_led Read the indicator rule. SMART uses cached LED data to avoid repeated device queries. Read doorbell_settings_get doorbell_settings_get Read firmware_check Ask a SMART device to check the vendor cloud for an update and return local release notes. The device makes Read firmware_get Read SMART versions, automatic update settings and locally cached release notes. Read get_device get_device Read group_list List tolpo's local groups and their device slugs. Read home_view_url The address of the 3D home view. It is served by tolpo serve (or npx -y tolpo serve), not by the MCP Read hub_alarm_config Read hub siren settings, state and available tones, including H100 chime tones. Read hub_child_history Read the history stored on a hub child, in native order and units. Read hub_diagnostics_read Read hub load limits and memory counters. Omits identifiers and support logs. Read hub_led Read H100 or H200 status LED settings. Read light_features Read built-in effect choices, fade settings, strip length, and LED when the device exposes them. Read light_get_auto_white Read the Auto-White enable flag and mode for one light or child. Read light_get_defaults Read power-on defaults and power-outage behavior for one light or light child. Read light_get_presets Read saved brightness or color states for one light or light child. Read light_get_segment_effect Read decoded Lighting Effect V2 metadata. Omit undecoded states and display colors. Read light_list_rules List on-device schedules, countdown timers, or Away Mode rules. Read light_next_event Read the next on-device event for a light or an individual ceiling-light child. Read list_devices list_devices Read network_providers List configured providers, authenticated reachability, capabilities and blind spots. Read network_upnp_audit Read router port mappings for one managed device. State which providers cannot inspect UPnP. Read plug_energy_usage Read energy totals, runtime, generation and cost figures. Preserve the device's units and cost structure. Read rescan Search the network again for new, moved or previously unreachable devices. Takes up to 20 seconds. Read room_list List tolpo's local rooms and their device slugs. Read sensor_settings Read one supported sensor setting. Returns only public setting fields. Read tolpo_areas List the parts of tolpo (areas such as lights, plugs, cameras), whether each is on, and the tools each one off Read vacuum_consumables Read wear counters in minutes. Remaining times use python-kasa's assumed lifetimes. Read vacuum_do_not_disturb Read the quiet window and its behavior bit field (1 no resume, 2 voice off, 4 dim LEDs, 8 no auto empty, 16 no Read vacuum_locate Play the seek-me sound. Requires confirm='playSelectAudio <robot id>'. Read vacuum_map Read one map's metadata and its room ids, names and preferences. The bitmap is not decoded or returned. Read vacuum_maps Read saved map metadata and the current map id. Names are decoded and flattened. Read vacuum_records Read compact cleaning history and totals. Timestamps can reveal presence patterns. Read vacuum_schedules Read up to 32 schedules from one page. week_day stays a raw protocol value. Read vacuum_settings Read cleaning preferences and available dock, speaker and child lock settings. Read vacuum_status Read status, every reported error and prompt, battery and cleaning progress. Read valve_settings Read one KE100 setting or mechanical maintenance status through its hub. Read wifi_scan Scan on the device's own radio. Returns counts and signal measurements. Wi-Fi names and hardware addresses sta
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1662 tools
adminautomation
Apibase 1384 tools
adminautomation
Delx Mcp A2a 1068 tools
adminautomation
MCP Framework Personal 912 tools
adminautomation
Hermoso 896 tools
adminautomation
Nodebench 824 tools
adminautomation
Altium-MCP-Suite 817 tools
adminautomation
Eda Agent 777 tools
adminautomation
FAQ

Questions about Tolpo

Can an AI agent delete data through the Tolpo MCP server? +

Yes. The Tolpo server exposes 16 destructive tools including automation_delete, camera_ptz_delete_presets, camera_storage_format. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Tolpo? +

The Tolpo server has 148 write tools including automation_alerts, automation_create, automation_disable. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Tolpo.

How many tools does the Tolpo MCP server expose? +

243 tools across 4 categories: Destructive, Execute, Read, Write. 64 are read-only. 179 can modify, create, or delete data.

How do I enforce a policy on Tolpo? +

Register the Tolpo MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Tolpo tool call.

Deterministic rules across all 243 Tolpo tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TOLPO →

Instant setup, no code required.

243 Tolpo tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Tolpo's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.