// SCAN REPORT

It2mcp

40 tools. 30 can modify or destroy data without limits.

30 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

30 can modify or destroy data

10 read-only

40 tools total

Community server · catalogue entry verified 30/06/2026

How to control It2mcp ↓

TOOL MAP

What It2mcp exposes to your agents

Read (10) Write / Execute (30) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous It2mcp tools

Execute · Medium session_clear This tool sends a control character (Ctrl+L) to a terminal session, which is an external operation that triggers an action in iTerm2. Execute · High session_restart Restarting a terminal session is an executable action that triggers external state changes in a running application. Execute · Critical session_run This tool executes shell commands in iTerm2 sessions with unrestricted argument capability. Execute · High tab_new While the tool itself only creates a tab container, its purpose is to enable terminal command execution.

30 of It2mcp's 40 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control It2mcp

PolicyLayer is an MCP gateway — it sits between your AI agents and It2mcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "app_theme": {
    "limits": [
      {
        "counter": "app_theme_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "app_get_focus": {
    "limits": [
      {
        "counter": "app_get_focus_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register It2mcp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON IT2MCP →

Instant setup, no code required.

FULL CATALOGUE

All 40 It2mcp tools

EXECUTE 18 tools

Execute app_activate Activate iTerm2 (bring to front). Execute batch batch Execute broadcast_on Enable input broadcasting to all sessions in the current tab. Execute session_clear Clear the screen of an iTerm2 session (sends Ctrl+L). Execute session_focus Focus (activate) a specific iTerm2 session. Execute session_restart Restart an iTerm2 session. Execute session_run Execute a command in an iTerm2 session (sends text + Enter). Execute session_send Send text to an iTerm2 session without pressing Enter. Execute session_split Split an iTerm2 session into a new pane. Execute tab_move Move a tab to its own new window. Execute tab_new Create a new tab in an iTerm2 window. Execute tab_next Switch to the next tab in the current window. Execute tab_prev Switch to the previous tab in the current window. Execute tab_select Select a tab by its ID or numeric index. Execute window_arrange_restore Restore a saved window arrangement. Execute window_focus Focus (activate) a specific iTerm2 window. Execute window_new Create a new iTerm2 window. Execute window_resize Resize an iTerm2 window.

WRITE 12 tools

Write app_theme Get or set the iTerm2 theme. Write broadcast_add Create a broadcast group with specific sessions. Write broadcast_off Disable input broadcasting. Write profile_apply Apply an iTerm2 profile to a session. Write session_close Close an iTerm2 session. Write session_set_name Set the name of an iTerm2 session. Write session_set_variable Set the value of an iTerm2 session variable. Write tab_close Close an iTerm2 tab. Write window_arrange_save Save the current window arrangement. Write window_close Close an iTerm2 window. Write window_fullscreen Set fullscreen state for an iTerm2 window. Write window_move Move an iTerm2 window to a specific screen position.

READ 10 tools

Read app_get_focus Get information about the currently focused window, tab, and session. Read app_version Get the iTerm2 version. Read profile_list List all iTerm2 profiles with their GUIDs and names. Read profile_show Show detailed information about an iTerm2 profile. Read session_get_variable Get the value of an iTerm2 session variable. Read session_list session_list Read session_read Read the visible screen contents of an iTerm2 session. Read tab_list List all iTerm2 tabs with their IDs, window IDs, indices, session counts, and active state. Read window_arrange_list List all saved window arrangements. Read window_list List all iTerm2 windows with their IDs, tab counts, positions, sizes, and fullscreen state.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about It2mcp

How do I prevent bulk modifications through It2mcp? +

The It2mcp server has 12 write tools including app_theme, broadcast_add, broadcast_off. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach It2mcp.

How many tools does the It2 MCP server expose? +

40 tools across 4 categories: Destructive, Execute, Read, Write. 10 are read-only. 30 can modify, create, or delete data.

How do I enforce a policy on It2mcp? +

Register the It2 MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every It2mcp tool call.

Deterministic rules across all 40 It2mcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON IT2MCP →

Instant setup, no code required.

40 It2mcp tools catalogued and risk-classified — across an index of 43,000+ MCP servers.