// SCAN REPORT

CATS MCP Server

187 tools. 85 can modify or destroy data without limits.

26 destructive tools with no built-in limits. Policy required.

Last updated:

85 can modify or destroy data
102 read-only
187 tools total

Community server · catalogue entry verified 01/07/2026

How to control CATS MCP Server ↓

TOOL MAP

What CATS MCP Server exposes to your agents

Read (102) Write / Execute (59) Destructive / Financial (26)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous CATS MCP Server tools

Destructive · High delete_activity This tool permanently deletes activity records without the possibility of reversal. Destructive · High delete_attachment Deletion is an irreversible operation that destroys data without the possibility of undo in most systems. Destructive · High delete_candidate The name explicitly indicates a destructive operation that removes candidate data. Destructive · High delete_candidate_email The tool name explicitly indicates deletion of a candidate's email record.

85 of CATS MCP Server's 187 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control CATS MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and CATS MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete_activity": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "attach_candidate_tags": {
    "limits": [
      {
        "counter": "attach_candidate_tags_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "authorize_candidate": {
    "limits": [
      {
        "counter": "authorize_candidate_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register CATS MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON CATS →

Instant setup, no code required.

FULL CATALOGUE

All 187 CATS MCP Server tools

DESTRUCTIVE 26 tools
Destructive delete_activity Delete an activity record (permanent). Destructive delete_attachment delete_attachment Destructive delete_candidate delete_candidate Destructive delete_candidate_email delete_candidate_email Destructive delete_candidate_list Delete a candidate list. Destructive delete_candidate_list_item delete_candidate_list_item Destructive delete_candidate_phone delete_candidate_phone Destructive delete_candidate_tag delete_candidate_tag Destructive delete_candidate_work_history_item delete_candidate_work_history_item Destructive delete_company Delete a company record (permanent). Destructive delete_company_department Delete a company department. Destructive delete_company_phone Delete a company phone number. Destructive delete_company_tag Remove a specific tag from a company. Destructive delete_contact Delete a contact record (permanent). Destructive delete_contact_email Delete a contact's email address. Destructive delete_contact_phone Delete a contact's phone number. Destructive delete_contact_tag Remove a specific tag from a contact. Destructive delete_job Permanently delete a job posting. Destructive delete_job_list Delete a job list. Destructive delete_job_list_item delete_job_list_item Destructive delete_job_tag Remove a specific tag from a job. Destructive delete_pipeline Delete a pipeline entry. Destructive delete_task Delete a task. Destructive delete_webhook delete_webhook Destructive delete_work_history Delete a work history entry (permanent). Destructive unpublish_job_from_portal Remove a job posting from a portal.
EXECUTE 1 tools
Execute parse_resume parse_resume
WRITE 58 tools
Write attach_candidate_tags Add tags to a candidate (keeps existing tags). Write attach_company_tags Attach additional tags to a company (additive). Write attach_contact_tags Attach additional tags to a contact (additive). Write attach_job_tags Add tags to a job (keeps existing tags). Write change_candidate_thumbnail change_candidate_thumbnail Write change_company_thumbnail Update a company's thumbnail image. Write change_contact_thumbnail Update a contact's thumbnail image. Write change_job_status change_job_status Write change_pipeline_status change_pipeline_status Write create_backup create_backup Write create_candidate create_candidate Write create_candidate_activity create_candidate_activity Write create_candidate_email create_candidate_email Write create_candidate_list Create a new candidate list. Write create_candidate_list_items Add candidates to a list. Write create_candidate_phone create_candidate_phone Write create_candidate_work_history create_candidate_work_history Write create_company create_company Write create_company_activity create_company_activity Write create_company_department Create a new department for a company. Write create_company_phone Add a phone number for a company. Write create_contact create_contact Write create_contact_activity create_contact_activity Write create_contact_email Add an email address to a contact. Write create_contact_phone Add a phone number to a contact. Write create_job create_job Write create_job_list Create a new job list/collection. Write create_job_list_items Add jobs to a job list. Write create_pipeline create_pipeline Write create_task Create task. POST /tasks Write create_webhook create_webhook Write publish_job_to_portal Publish a job posting to a portal. Write replace_candidate_tags replace_candidate_tags Write replace_company_tags Replace all tags on a company (replaces existing tags). Write replace_contact_tags Replace all tags on a contact (replaces existing tags). Write submit_job_application submit_job_application Write submit_portal_registration Submit portal registration information. Write update_activity update_activity Write update_candidate update_candidate Write update_candidate_custom_field update_candidate_custom_field Write update_candidate_email update_candidate_email Write update_candidate_phone update_candidate_phone Write update_candidate_work_history_item update_candidate_work_history_item Write update_company update_company Write update_company_department update_company_department Write update_company_phone update_company_phone Write update_contact update_contact Write update_contact_email update_contact_email Write update_contact_phone update_contact_phone Write update_job update_job Write update_job_custom_field update_job_custom_field Write update_pipeline update_pipeline Write update_pipeline_status Update pipeline status. PUT /pipelines/{id}/status Write update_task update_task Write update_work_history update_work_history Write upload_candidate_attachment upload_candidate_attachment Write upload_company_attachment upload_company_attachment Write upload_contact_attachment upload_contact_attachment
READ 102 tools
Read authorize_candidate authorize_candidate Read authorize_user authorize_user Read download_attachment download_attachment Read filter_activities filter_activities Read filter_candidates filter_candidates Read filter_companies filter_companies Read filter_contacts filter_contacts Read filter_jobs filter_jobs Read filter_pipelines filter_pipelines Read get_activity Get activity details. GET /activities/{id} Read get_attachment get_attachment Read get_backup get_backup Read get_candidate Get candidate details. GET /candidates/{id} Read get_candidate_custom_field get_candidate_custom_field Read get_candidate_list Get a specific candidate list. Read get_candidate_list_item get_candidate_list_item Read get_candidate_thumbnail Get a candidate's thumbnail image. Read get_candidate_work_history_item get_candidate_work_history_item Read get_company Get company details. GET /companies/{id} Read get_company_custom_field Get a specific custom field for a company. Read get_company_custom_fields Get custom fields for a company. Read get_company_phone Get a specific company phone. Read get_company_thumbnail Get a company's thumbnail image. Read get_contact Get detailed information about a specific contact. Read get_contact_custom_field Get a specific custom field for a contact. Read get_contact_custom_fields Get custom fields for a contact. Read get_contact_thumbnail Get a contact's thumbnail image. Read get_job Get job details. GET /jobs/{id} Read get_job_application Get details of a specific application. Read get_job_custom_field Get a specific custom field for a job. Read get_job_list Get details of a specific job list. Read get_job_list_item Get a specific item from a job list. Read get_job_status Get a job status definition by ID. Read get_me get_me Read get_pipeline Get pipeline details. GET /pipelines/{id} Read get_pipeline_statuses Get available statuses for a pipeline. Read get_pipeline_workflow Get details of a specific pipeline workflow. Read get_pipeline_workflow_status get_pipeline_workflow_status Read get_portal Get detailed information about a specific portal. Read get_portal_registration Get portal registration information and requirements. Read get_site Get current CATS site information and settings. Read get_tag get_tag Read get_task Get task details. GET /tasks/{id} Read get_trigger get_trigger Read get_user get_user Read get_webhook get_webhook Read get_work_history get_work_history Read list_activities List activities. GET /activities Read list_backups list_backups Read list_candidate_activities list_candidate_activities Read list_candidate_attachments list_candidate_attachments Read list_candidate_custom_fields Get all custom fields for a candidate. Read list_candidate_emails list_candidate_emails Read list_candidate_list_items list_candidate_list_items Read list_candidate_lists List all candidate lists. Read list_candidate_phones list_candidate_phones Read list_candidate_pipelines list_candidate_pipelines Read list_candidate_tags List all tags assigned to a candidate. Read list_candidate_work_history list_candidate_work_history Read list_candidates List candidates. GET /candidates Read list_companies List companies. GET /companies Read list_company_activities List all activities for a specific company. Read list_company_attachments List all attachments for a company. Read list_company_contacts List all contacts associated with a company. Read list_company_departments List all departments within a company. Read list_company_phones List all phone numbers for a company. Read list_company_pipelines List all pipelines associated with a company. Read list_company_tags List all tags applied to a company. Read list_contact_activities List all activities for a specific contact. Read list_contact_attachments List all attachments for a contact. Read list_contact_emails List all email addresses for a contact. Read list_contact_phones List all phone numbers for a contact. Read list_contact_pipelines List all pipelines associated with a contact. Read list_contact_tags List all tags applied to a contact. Read list_contacts list_contacts Read list_events list_events Read list_job_application_fields List all fields for a specific job application. Read list_job_applications list_job_applications Read list_job_attachments List all attachments for a job. Read list_job_custom_fields Get all custom fields for a job. Read list_job_list_items List all items in a specific job list. Read list_job_lists List all job lists/collections. Read list_job_pipelines List all pipelines for a job. Read list_job_statuses List all available job statuses. Read list_job_tags List all tags assigned to a job. Read list_job_tasks List all tasks associated with a job. Read list_jobs List jobs. GET /jobs Read list_pipeline_workflow_statuses List all statuses/stages in a workflow. Read list_pipeline_workflows List all pipeline workflows. Read list_pipelines List pipelines. GET /pipelines Read list_portal_jobs List all jobs published to a specific portal. Read list_portals List all job portals/boards. Read list_tags list_tags Read list_tasks List tasks. GET /tasks Read list_triggers list_triggers Read list_users list_users Read list_webhooks list_webhooks Read search_activities Search activities by description or other criteria. Read search_candidates Search candidates. GET /candidates/search Read search_companies search_companies Read search_contacts search_contacts Read search_jobs Search jobs. GET /jobs/search
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about CATS MCP Server

Can an AI agent delete data through the CATS MCP Server MCP server? +

Yes. The CATS MCP Server server exposes 26 destructive tools including delete_activity, delete_attachment, delete_candidate. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through CATS MCP Server? +

The CATS MCP Server server has 58 write tools including attach_candidate_tags, attach_company_tags, attach_contact_tags. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach CATS MCP Server.

How many tools does the CATS MCP Server MCP server expose? +

187 tools across 4 categories: Destructive, Execute, Read, Write. 102 are read-only. 85 can modify, create, or delete data.

How do I enforce a policy on CATS MCP Server? +

Register the CATS MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every CATS MCP Server tool call.

Deterministic rules across all 187 CATS MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CATS →

Instant setup, no code required.

187 CATS MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.