// SCAN REPORT

Synology Office

39 tools. 23 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

23 can modify or destroy data

16 read-only

39 tools total

Community server · catalogue entry verified 12/06/2026

How to control Synology Office ↓

TOOL MAP

What Synology Office exposes to your agents

Read (16) Write / Execute (19) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Synology Office tools

Destructive · High spreadsheet_delete_file This tool irreversibly deletes complete spreadsheet files without recovery. Destructive · High calendar_delete_event This tool permanently removes calendar events, which cannot be undone. Destructive · High drive_delete_file This tool irreversibly removes data (files or folders) from Synology Drive. Destructive · High spreadsheet_delete_sheet This tool irreversibly deletes data (a sheet tab) from a spreadsheet document.

23 of Synology Office's 39 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Synology Office

PolicyLayer is an MCP gateway — it sits between your AI agents and Synology Office, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "calendar_delete_event": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "spreadsheet_append_rows": {
    "limits": [
      {
        "counter": "spreadsheet_append_rows_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "calendar_get_event": {
    "limits": [
      {
        "counter": "calendar_get_event_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Synology Office — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SYNOLOGY OFFICE →

Free to start. No card required.

FULL CATALOGUE

All 39 Synology Office tools

DESTRUCTIVE 4 tools

Destructive calendar_delete_event Delete a Synology Calendar event permanently. Requires confirm=true. Destructive drive_delete_file Delete a file or folder in Synology Drive (moves to trash by default). Set confirm=true to execute. Destructive spreadsheet_delete_file WARNING: Permanently delete an ENTIRE spreadsheet file (.osheet). Destructive spreadsheet_delete_sheet Delete a sheet tab from a Synology Spreadsheet. This action cannot be undone. Provide either file_id or name.

WRITE 19 tools

Write spreadsheet_append_rows Append rows to the end of existing data in a Synology Spreadsheet sheet. Provide either file_id or name. Set c Write drive_get_sharing_link Generate or retrieve a sharing link for a Synology Drive file with configurable permission and optional expiry Write calendar_create_calendar Create a new Synology Calendar. Write calendar_create_event Create a new Synology Calendar event. Requires confirm=true. Write calendar_update_event Update an existing Synology Calendar event. Requires confirm=true. Write drive_add_label Add a label to a file or folder in Synology Drive. Write drive_create_folder Create a new folder in Synology Drive, optionally creating parent directories. Write drive_move_file Move or rename a file/folder in Synology Drive. Set confirm=true to execute; omit or set false for a dry-run c Write drive_upload_file Upload a file to Synology Drive from a base64-encoded payload. Max recommended size: 50 MB. Write mailplus_mark_messages Mark MailPlus messages as read, unread, flagged, or unflagged. Write mailplus_move_messages Move MailPlus messages to another folder. Requires confirm=true to execute. Write mailplus_send_message Send an email via Synology MailPlus. Requires confirm=true to execute. Write spreadsheet_add_sheet Add a new sheet tab to an existing Synology Spreadsheet file. Provide either file_id or name. Write spreadsheet_batch_update Insert or delete rows/columns in a Synology Spreadsheet. Provide either file_id or name. Set confirm=true to e Write spreadsheet_create Create a new empty Synology Spreadsheet (.osheet). Note: the Spreadsheet API has no notion of destination fold Write spreadsheet_register Register a Synology Spreadsheet so it can be addressed by name in other tools. Provide the alphanumeric ID fro Write spreadsheet_rename_sheet Rename a sheet tab in a Synology Spreadsheet. Provide either file_id or name. Set confirm=true to execute. Write spreadsheet_write_cells Write values to a range of cells in a Synology Spreadsheet sheet. Provide either file_id or name. Set confirm= Write spreadsheet_write_styles Bulk overwrite cell styles (fonts, colors, alignment, number formats, borders) for a rectangular block in a Sy

READ 16 tools

Read calendar_get_event Get details of a specific Synology Calendar event. Read calendar_list_calendars List all Synology Calendar calendars accessible to the authenticated user. Read calendar_list_events List Synology Calendar events within a date range. Read drive_download_file Download a file from Synology Drive and return it as base64-encoded content with metadata. Read drive_get_file_info Get detailed metadata (size, owner, ACL, labels) for a specific Drive file or folder. Read drive_list_files List files and folders in a Synology Drive path. Supports pagination, sorting, and glob filtering. Read drive_list_labels List all labels defined in Synology Drive (id, name, color). Read drive_search_files Search for files across Synology Drive by name or keyword, with optional extension filter. Read mailplus_get_message Get the full content of a MailPlus email message, with optional attachment download. Read mailplus_list_folders List all mail folders (IMAP-like folder tree) for the MailPlus account. Read mailplus_list_messages List email messages in a MailPlus folder with pagination, sort, and keyword search. Read spreadsheet_get_info Get metadata about a Synology Spreadsheet file: sheet names, row and column counts. Provide either file_id or Read spreadsheet_get_styles Get cell styling information (fonts, colors, alignment, number formats) for a range in a Synology Spreadsheet. Read spreadsheet_list List all Synology Spreadsheet (.osheet) files in a Drive folder. Read spreadsheet_read_sheet Read cell data from a Synology Spreadsheet sheet. Returns headers (first row), data rows, and totals. Provide Read spreadsheet_export Export a Synology Spreadsheet to xlsx or csv format. Returns the file content as base64. Provide either file_i

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Synology Office

Can an AI agent delete data through the Synology Office MCP server? +

Yes. The Synology Office server exposes 4 destructive tools including calendar_delete_event, drive_delete_file, spreadsheet_delete_file. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Synology Office? +

The Synology Office server has 19 write tools including spreadsheet_append_rows, drive_get_sharing_link, calendar_create_calendar. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Synology Office.

How many tools does the Synology Office MCP server expose? +

39 tools across 4 categories: Destructive, Execute, Read, Write. 16 are read-only. 23 can modify, create, or delete data.

How do I enforce a policy on Synology Office? +

Register the Synology Office MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Synology Office tool call.

Deterministic rules across all 39 Synology Office tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SYNOLOGY OFFICE →

Free to start. No card required.

39 Synology Office tools catalogued and risk-classified — across an index of 43,000+ MCP servers.