// SCAN REPORT

FiftyOne MCP Server

47 tools. 21 can modify or destroy data without limits.

21 write tools that can modify data. Rate limits recommended.

Last updated: 11 Jun 2026

21 can modify or destroy data

26 read-only

47 tools total

Community server · catalogue entry verified 11/06/2026

How to control FiftyOne MCP Server ↓

TOOL MAP

What FiftyOne MCP Server exposes to your agents

Read (26) Write / Execute (21) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous FiftyOne MCP Server tools

Execute · High execute_operator This tool executes operators with unrestricted scope ('any FiftyOne operator'), which can trigger external operations and transformations on computer vision datasets. Execute · High execute_pipeline This tool runs operator pipelines whose effects depend on which operators are chained together. Execute · Medium launch_app Launching an application server is an Execute action—it triggers an external operation whose effects depend on the runtime environment and configuration. Execute · High download_plugin This tool downloads and installs external code (a plugin) into the FiftyOne environment.

21 of FiftyOne MCP Server's 47 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control FiftyOne MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and FiftyOne MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "clear_view": {
    "limits": [
      {
        "counter": "clear_view_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "bounds": {
    "limits": [
      {
        "counter": "bounds_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register FiftyOne MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FIFTYONE →

Free to start. No card required.

FULL CATALOGUE

All 47 FiftyOne MCP Server tools

EXECUTE 4 tools

Execute execute_operator Execute any FiftyOne operator. Provides Execute execute_pipeline Execute a multi-stage operator pipeline. Execute launch_app Launches the FiftyOne App server. Required Execute download_plugin Downloads and installs a FiftyOne plugin

WRITE 17 tools

Write clear_view Clears the current view from the session, Write reset_color_scheme Reset the App color scheme to the dataset or Write untag_samples Remove tags from samples in a dataset. Write add_sample_field Add a new field with an explicit type to a Write add_samples Add new samples to an existing dataset. Each Write annotate Enter annotation mode for a specific sample Write disable_plugin Disables a FiftyOne plugin, removing its Write enable_plugin Enables a downloaded FiftyOne plugin, Write set_active_fields Control which fields are visible in the App Write set_color_scheme Set the color scheme for a dataset. Persists Write set_filters Set the sidebar filter state in the App. Write set_session_color_scheme Set the live color scheme for the current App Write set_sidebar_groups Replace the sidebar group configuration for Write set_spaces Sets the workspace (spaces layout) in the App Write set_values Bulk-assign values to a field across multiple Write set_view Sets a filtered view in the FiftyOne App. Write tag_samples Add tags to samples in a dataset. Optionally

READ 26 tools

Read bounds Get the min and max values for a numeric field. Read count_sample_tags Count how many samples have each tag in a Read count_values Count occurrences of each value for a field Read dataset_summary Get detailed summary statistics and metadata Read distinct Get the list of unique values for a field Read get_app_config Get the full app config for a dataset Read get_color_scheme Get the color scheme configuration for a Read get_context_info Gets information about the current FiftyOne Read get_field_schema Get the full field schema for a dataset with Read get_operator_schema Get the input schema for a specific operator. Read get_plugin_info Gets detailed information about a specific Read get_sidebar_groups Get the sidebar group configuration for a Read get_values Get the raw values of a field for all samples Read histogram_values Compute a histogram of values for a numeric Read list_brain_runs List brain method run keys for a dataset. Read list_datasets List all available FiftyOne datasets with Read list_delegated_operations List delegated (background) operations and Read list_evaluations List evaluation run keys for a dataset. Read list_me_scenarios List model evaluation scenarios for a Read list_open_panels List all panels currently open in the Read list_operators Discover all available FiftyOne operators Read list_plugins Lists available FiftyOne plugins and their Read load_dataset Load a FiftyOne dataset by name and return Read mean Compute the mean (average) of a numeric field Read std Compute the standard deviation of a numeric Read sum Compute the sum of a numeric field across all

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about FiftyOne MCP Server

How do I prevent bulk modifications through FiftyOne MCP Server? +

The FiftyOne MCP Server server has 17 write tools including clear_view, reset_color_scheme, untag_samples. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach FiftyOne MCP Server.

How many tools does the FiftyOne MCP Server MCP server expose? +

47 tools across 4 categories: Destructive, Execute, Read, Write. 26 are read-only. 21 can modify, create, or delete data.

How do I enforce a policy on FiftyOne MCP Server? +

Register the FiftyOne MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every FiftyOne MCP Server tool call.

Deterministic rules across all 47 FiftyOne MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FIFTYONE →

Free to start. No card required.

47 FiftyOne MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.