// SCAN REPORT

VibeMCP

51 tools. 23 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

23 can modify or destroy data

28 read-only

51 tools total

Community server · catalogue entry verified 29/06/2026

How to control VibeMCP ↓

TOOL MAP

What VibeMCP exposes to your agents

Read (28) Write / Execute (20) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous VibeMCP tools

Destructive · High calendar_delete_event Delete a calendar event (Google Calendar or Outlook). Destructive · High gmail_delete_label Delete a Gmail label by ID. System labels cannot be deleted. Destructive · High remove_account Remove a connected account. Write · Medium outlook_batch_update Batch update multiple Outlook messages at once. Supports marking read/unread, archiving, and moving.

23 of VibeMCP's 51 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control VibeMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and VibeMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "calendar_delete_event": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_google_account": {
    "limits": [
      {
        "counter": "add_google_account_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "accounts_status": {
    "limits": [
      {
        "counter": "accounts_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register VibeMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON VIBEMCP →

Instant setup, no code required.

FULL CATALOGUE

All 51 VibeMCP tools

DESTRUCTIVE 3 tools

Destructive calendar_delete_event Delete a calendar event (Google Calendar or Outlook). Destructive gmail_delete_label Delete a Gmail label by ID. System labels cannot be deleted. Destructive remove_account Remove a connected account.

WRITE 20 tools

Write add_google_account Add a Google account and start OAuth flow. Opens browser for sign-in. Call complete_google_auth after signing Write add_microsoft_account Add a Microsoft account using Device Code Flow. Returns a code the user must enter at a URL. Call complete_mic Write calendar_create_event Create a new calendar event (Google Calendar or Outlook). Supports recurring events via recurrence_rule. Write calendar_update_event Update an existing calendar event (Google Calendar or Outlook). Write complete_google_auth Complete Google authentication after user has signed in via the OAuth URL. Write complete_microsoft_auth Complete Microsoft authentication after user has entered the device code. Write gmail_batch_modify Batch modify Gmail messages: archive, mark read/unread, trash, or untrash up to 1000 messages at once. Write gmail_create_draft Create a new Gmail draft. Write gmail_create_label Create a new Gmail label. Write gmail_modify_labels Add or remove labels from one or more Gmail messages. Write gmail_send_message Send an email via Gmail with proper RFC 2822 threading support. Write gmail_set_vacation Enable or disable Gmail vacation (out-of-office) auto-reply with optional date range. Write gmail_update_label Update an existing Gmail label name or visibility. Write outlook_batch_update Batch update multiple Outlook messages at once. Supports marking read/unread, archiving, and moving. Write outlook_move_message Move an Outlook message to a different folder. Write outlook_send_message Send an email via Microsoft 365 Outlook. Write outlook_set_auto_reply Configure auto-reply (out-of-office) settings for an Outlook account. Write outlook_set_categories Set categories on an Outlook message. Write outlook_set_flag Set a follow-up flag on an Outlook message. Write resolve_contacts Resolve email addresses to display names using the account contacts. Useful for enriching email threads with s

READ 28 tools

Read accounts_status Check authentication status of all accounts and server configuration. Read calendar_free_busy Check free/busy availability for calendars or people in a time range. Read calendar_list_calendars List available calendars for an account (Google Calendar or Outlook). Read calendar_list_events List calendar events in a time range. Works with Google Calendar and Outlook Calendar. Read contact_list List contacts from a Google or Microsoft account. Returns email, name, and provider-specific metadata. Read contact_search Search contacts by name or email across Google or Microsoft. Uses Google People API search or Microsoft Graph Read gmail_download_attachment Download an attachment from a Gmail message. Returns base64url-encoded data with metadata. Read gmail_get_message Get full Gmail message content by ID including body and attachments. Read gmail_get_thread Get full conversation thread with all messages. Read gmail_get_vacation Get current Gmail vacation (out-of-office) auto-reply settings. Read gmail_list_labels List all Gmail labels. Read gmail_list_messages List Gmail messages with TOON-optimized output. Supports Gmail search operators (e.g., Read gmail_list_threads List email threads with TOON-optimized output. Read gmail_reply_to_message Reply to an existing Gmail message with automatic threading (In-Reply-To, References headers). Read list_accounts List all connected Google and Microsoft accounts with their auth status. Read outlook_download_attachment Download a specific attachment from an Outlook message. Read outlook_forward_message Forward an Outlook message. Read outlook_get_auto_reply Get the current auto-reply (out-of-office) settings for an Outlook account. Read outlook_get_message Get full Outlook message by ID. Read outlook_list_attachments List all attachments on an Outlook message. Read outlook_list_categories List all Outlook mail categories for the account. Read outlook_list_folders List Outlook mail folders. Read outlook_list_messages List Outlook messages with TOON-optimized output. Supports folder filtering. Read outlook_reply_to_message Reply to an Outlook message. Read outlook_search Search Outlook messages using KQL. Read unified_calendar Get calendar events across all accounts (Google Calendar + Outlook) in a time range. Read unified_inbox Get unread messages across all configured email accounts. Read unified_search Search across all configured email accounts (Gmail + Outlook) simultaneously. Returns combined results with TO

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about VibeMCP

Can an AI agent delete data through the Vibe MCP server? +

Yes. The VibeMCP server exposes 3 destructive tools including calendar_delete_event, gmail_delete_label, remove_account. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through VibeMCP? +

The VibeMCP server has 20 write tools including add_google_account, add_microsoft_account, calendar_create_event. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach VibeMCP.

How many tools does the Vibe MCP server expose? +

51 tools across 3 categories: Destructive, Read, Write. 28 are read-only. 23 can modify, create, or delete data.

How do I enforce a policy on VibeMCP? +

Register the Vibe MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every VibeMCP tool call.

Deterministic rules across all 51 VibeMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VIBEMCP →

Instant setup, no code required.

51 VibeMCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.