// SCAN REPORT

Webcake Storefront

287 tools. 150 can modify or destroy data without limits.

31 destructive tools with no built-in limits. Policy required.

Last updated:

150 can modify or destroy data
137 read-only
287 tools total

Community server · catalogue entry checked 07/07/2026

How to control Webcake Storefront ↓

TOOL MAP

What Webcake Storefront exposes to your agents

Read (137) Write / Execute (119) Destructive / Financial (31)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Webcake Storefront tools

Destructive · High delete_global_section The tool permanently deletes data (a global section) and modifies all dependent pages in a single atomic operation. Destructive · High clear_page_draft The tool deletes data (page drafts) without the ability to undo or recover the deleted content. Destructive · High delete_affiliate_accounts This tool performs an irreversible destructive action by deleting affiliate accounts. Destructive · High delete_affiliate_products The tool performs an irreversible deletion of affiliate product associations.

150 of Webcake Storefront's 287 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Webcake Storefront

PolicyLayer is an MCP gateway — it sits between your AI agents and Webcake Storefront, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "clear_page_draft": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "accept_invitation": {
    "limits": [
      {
        "counter": "accept_invitation_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "auto_translate": {
    "limits": [
      {
        "counter": "auto_translate_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Webcake Storefront — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON WEBCAKE STOREFRONT →

Instant setup, no code required.

FULL CATALOGUE

All 287 Webcake Storefront tools

DESTRUCTIVE 31 tools
Destructive clear_page_draft Delete a local page draft (does NOT delete any backend page already created from it). Destructive delete_affiliate_accounts Remove affiliate accounts. Destructive delete_affiliate_products Remove products from the affiliate program. Destructive delete_appointment_addresses Delete appointment locations by id. Destructive delete_appointment_calendars Delete booking calendars by id. Destructive delete_appointment_classifies Delete appointment classifies by id. Destructive delete_appointment_employees Delete appointment employees by id. Destructive delete_article Delete a blog article Destructive delete_automation Delete one or more automations by id. Destructive delete_collection Delete a collection (table) and all its records by id. Irreversible. Destructive delete_contacts Delete contacts by id. Destructive delete_course Delete a course by id (also deletes its tracks). Destructive delete_courses Delete multiple courses by id. Destructive delete_domain Detach/delete a custom domain from the site. Destructive delete_employees Remove employees (and any pending invitations) by site_permission id. Destructive delete_global_section Delete a global section (Header/Footer/block) and remove its node from every page source. Two-step safety: dry Destructive delete_global_source Delete a global source and its published version Destructive delete_page Delete a page Destructive delete_partner_feeds Delete product feeds by id. Destructive delete_product Delete one or more products by id. Destructive delete_product_category Delete one or more product categories by id. Destructive delete_redirect_urls Delete redirect URLs by id. Destructive delete_saved_filter Delete (or dismiss, if not owner) a saved filter by id. Destructive delete_site_utms Delete UTM links by id. Destructive delete_subscribers Delete subscribers by id. Destructive empty_media_trash Permanently delete all trashed media folders and content. Destructive remove_font Remove a font by id. Destructive remove_font_group Remove a font group by id. Destructive remove_reviews Delete one or more reviews by id. Destructive unblock_all_phone_customers Remove all blocked customer phone numbers for the site. Destructive uninstall_app Uninstall (remove) an installed application from the current site. Pass the app
EXECUTE 9 tools
Execute debug_function Run JS code in debug mode (without deploying). Returns execution result and console logs Execute invoke_tool Run any WebCake tool by exact name with its arguments (discover names + schemas via search_tools). Arguments a Execute publish_site Publish the whole site live — snapshots all current page sources into the live (published) version. Note: Buil Execute rebuild_sitemap Rebuild the whole sitemap (async background job). Execute run_function Run a deployed HTTP function. function_name excludes method prefix. Example: Execute send_mail Trigger a CMS automation to send an email (same endpoint @webcake/app/automation sendMail uses). Requires the Execute toggle_debug_render Toggle debug render mode for a CMS file Execute update_http_function Write the FULL HTTP function file content. Best for: writing new features, major refactors, or changes that to Execute verify_domain Run DNS verification for a domain and enqueue SSL issuance.
WRITE 110 tools
Write accept_invitation Accept a site invitation. Write add_domain Attach a custom domain to the site. Triggers DNS/ownership validation. Write add_draft_section Append ONE section to a local page draft (NO network — this is the durable per-section cache step that can Write add_section Append a section to an EXISTING page Write add_site_languages Set the full list of enabled languages for the site (used to add, remove, toggle, or change currency — always Write append_site_custom_code Append or prepend code to a custom code field WITHOUT reading the existing content first. Use this when you ne Write assign_customer_tags Add or remove tags on multiple customers at once. Write block_phone_customers Block customer phone numbers (upsert the given list). Write build_page Create a brand-new page AND set its full content source in one step. Two-step safety: call with dry_run=true ( Write commit_page_draft Persist a local page draft to the backend INCREMENTALLY (one section per request, 120s timeout each) so no sin Write create_appointment_address Create an appointment location. Region ids are optional (Vietnamese geo ids). Write create_appointment_calendar Create a booking calendar. \ Write create_appointment_classify Create an appointment classify (service type). Write create_appointment_employee Create an appointment employee (assignee). Write create_article Create a blog article so blog/post pages (post-list, grid-blog, post-overlay) have content. Built via the dash Write create_automation Create an automation. Checks the Automation app is installed first and installs it if needed. An automation = Write create_blog_category Create a blog/article category. Returns the new category id — pass it to create_article Write create_cms_file Create a new CMS file. Types: Write create_collection Create a new collection (custom data TABLE). It starts with the system columns (id/inserted_at/updated_at/crea Write create_contact Create a contact entry. Write create_course Create a course linked to a product. \ Write create_font_group Create a font group (e.g. a Google Font family by URL). Write create_global_section Create a reusable global section (Header / Footer / shared block) the way the builder does: persists a global_ Write create_global_source Create a new global source component. Component types: Write create_or_update_review Create a new review, edit an existing one, or post a shop reply. Omit \ Write create_page Create a new (empty) page. For a page with content use build_page instead. type is a KIND (main/store/member/b Write create_partner_feed Create a product feed. Write create_product Create a product so the storefront has real merchandise (grid-product / slider-product bindings need this). Si Write create_product_category Create a product category (so grid-category / a category page has something to show, and products can be filed Write create_products_from_device_templates Create products from selected device-template groups (Product Design app). Write create_redirect_url Create a redirect from one path to another. Write create_saved_filter Create a saved table filter. Write create_site Create a brand-new storefront site for the current account, then (by default) switch to it and return an EMPTY Write create_site_from_template Create a NEW site from a marketplace TEMPLATE (the dedicated Write create_site_utm Create a UTM tracking link. Write create_subscriber Add a newsletter subscriber (upsert by email or phone). Write duplicate_appointment_calendars Duplicate booking calendars by id (creates copies). Write edit_http_function Edit the HTTP function file by function name — best for targeted changes (fix a bug, rename, add one function) Write install_app Install (register) an application on the current site so its features become usable. For example, automations Write invite_employee Invite an employee to the site by email. Write mark_notification_read Mark a notification as read. Write moderate_reviews Approve or hide reviews (change moderation status). \ Write new_element Build a single structurally-valid element node from the real builder factory. Returns the node — edit its spec Write new_row Build a multi-column ROW container: children laid out SIDE BY SIDE (not stacked). This is how real pages build Write new_section Build a complete section node with children laid out in the builder Write remove_ppd Disable Personal Product Design for the given ids. Write rename_site Rename the site (display name). Write restore_file_version Roll a CMS file back to a saved version in one step: reads the version Write save_email_templates Create/update the transactional email templates. Each block is { title, content, status }. Write save_file_version Save a version snapshot of a CMS file for rollback Write save_translations Save translations for a resource type in a target language. Resources: ${RESOURCES.join( Write set_default_language Change which enabled language is the site default. Write set_image_alts Batch-write alt text for image elements across pages + global sources. Groups updates by source so each source Write set_product_published Publish or unpublish one or more products quickly (without a full update). Write start_page_draft Start a page draft (no network). Build a multi-section page safely: cache each section with add_draft_section, Write switch_site Switch to a different site by site_id. All subsequent tool calls will target the new site. The choice is saved Write sync_partner_feed Publish/sync a feed Write toggle_confirm_mode Toggle update confirmation mode. Controls whether update tools ask for user confirmation before saving. - Write update_affiliate_account Update an affiliate account (e.g. commission rate, status). Write update_affiliate_order_program Create/update the order-level affiliate commission program. \ Write update_affiliate_payout_status Update the status of affiliate payout(s). \ Write update_affiliate_product_program Create/update the product-level affiliate commission program. Write update_app Update an installed app Write update_app_review Update the product-review app Write update_appointment_address Update an appointment location. Pass Write update_appointment_calendar Update a booking calendar. Pass Write update_appointment_classify Update an appointment classify. Pass Write update_appointment_employee Update an appointment employee. Pass Write update_article Update a blog article Write update_auth Update authentication credentials. All values are saved to local database — next session auto-restores them. G Write update_automation Update an automation by id. Pass only the fields to change (name, description, type, status, rule). Write update_cms_file Update the code content of an existing CMS file Write update_collection_columns Add or change a collection Write update_course Update a course by id (partial). Pass Write update_domain Update a domain (rename or advanced settings such as redirect/SSL). Write update_employee_permissions Change an employee Write update_global_source Replace full source of a global source. IMPORTANT: Before calling this tool, you MUST: 1. Read existing source Write update_global_source_contents Update multilingual contents (upsert). Each entry: global_source_id, language_code, content. IMPORTANT: Before Write update_global_source_element Update a single element within a global source. Two-step process: STEP 1: Call with dry_run=true (default) → r Write update_global_source_elements Batch update multiple elements in one global source. Two-step process: STEP 1: Call with dry_run=true (default Write update_media_content Update a media content item (rename, move, or trash). Pass Write update_media_folder Update a media folder (rename, move, or trash). Pass Write update_page Update page properties (name, slug, settings, custom code) Write update_page_content Create/update page content for a specific language. IMPORTANT: Before calling, you MUST read existing content Write update_page_element Update properties of a specific element in page source. Two-step process: STEP 1: Call with dry_run=true (defa Write update_page_elements Batch update multiple elements in one page. Two-step process: STEP 1: Call with dry_run=true (default) → retur Write update_page_source Directly update the full page source JSON. IMPORTANT: Before calling this tool, you MUST: 1. Read existing sou Write update_partner_feed Update a product feed. Write update_price_contact Set which products/categories are Write update_product Update an existing product. Pass product_id + only the fields to change. To change price/stock, pass variation Write update_product_category Update a product category (name, image, description, or visibility). Pass id + fields to change. Write update_product_measurement Upsert product measurement units (full list). Each unit upserts by id; pass is_removed:true to delete one. Write update_pwa Update the PWA manifest (the full manifest object replaces the existing one). Write update_redirect_url Update a redirect URL. Pass Write update_saved_filter Update a saved filter by id. Write update_shipping Update shipping config. Pass Write update_site_custom_code Update custom code (CSS/JS) for the entire site. Only sends fields you specify — others remain unchanged. IMPO Write update_site_settings Update general site settings. The \ Write update_site_slug Change the site Write update_site_utm Update a UTM link. Pass Write upload_images Convert external image URLs, data: URIs, or LOCAL FILE PATHS into site-hosted CDN URLs by reading/downloading Write upload_media_base64 Upload an image to the media library from a base64 data URI. Returns the CDN URL. Write upsert_affiliate_product Enroll/update a product in the affiliate program with its own commission. \ Write upsert_customer_tag Create or update a customer tag. Omit Write upsert_material Create or update a product material. Supports nesting via parent_id. Omit Write upsert_ppd Enable/update Personal Product Design for products (bulk). Write upsert_product_brand Create or update a product brand. Omit Write upsert_product_supplier Create or update a product supplier. Omit Write upsert_product_tag Create or update a product tag. Omit Write upsert_ribbon Create or update a ribbon (sale badge).
READ 137 tools
Read auto_translate Machine-translate a JSON blob from one language to another. \ Read check_domain Check whether a domain is available/valid without attaching it. Read count_orders_by_status Get order count grouped by status. Useful for dashboard overview Read fetch_images_for_alt_fill One-shot helper for filling image_alt across the site. Returns image bytes + element metadata in a single resp Read find_customer Find a customer by ID, phone number, or email Read get_active_promotions Get all currently active promotions (is_activated=true and within start_time/end_time range) Read get_affiliate_programs Get the affiliate commission programs (order-level and product-level) configured for the site. Read get_affiliate_statistic Get aggregate affiliate statistics (clicks, orders, commission, payouts) for the site. Read get_app Get one installed app by its type code (returns null if not installed). App type codes: ${APP_TYPE_REFERENCE}. Read get_article Get article details by ID Read get_build_guide Get the BuilderX page authoring guide: page shape, the grid layout model, styling, breakpoints, forms/data, an Read get_category Get a single product category by id (includes custom sort product ids). Read get_collection Get a specific collection Read get_combo_items Get items (products/variations) and bonus products that compose a combo. Returns combo_items (required items w Read get_course Get a course by id (tracks, downloads, etc.). Read get_course_members List members (enrolled customers) of a course. Read get_current_context Show current connection context: which site_id, API URL, session, and account info. Call this first to confirm Read get_device_templates Get the device-template groups for the Product Design app. Read get_element Get the full detail of an element type: category, container flag, summary, an ATTRIBUTES reference (the meanin Read get_email_templates Get the site Read get_file_versions View version history of a CMS file. Each version includes its saved content — to restore, pass that content ba Read get_global_section Get one global section as a COMPACT tree (3-5x fewer tokens than raw JSON). Each line: ID [type] Read get_global_section_element Get full detail (style, config, specials, events, bindings, responsive bp1..bp4, children IDs) of a single ele Read get_global_source_contents Get multilingual contents for global sources by component type Read get_global_source_detail Get full detail of a global source — compact tree view showing all elements. Each line: ID [type] Read get_global_source_element Get full detail of a single element (style, config, specials, events, bindings, responsive, children). Read get_http_function Get the main HTTP function file. Choose the right mode for your task: - overview=true: function names + line r Read get_http_function_snippet Read specific function(s) by name. Much more token-efficient than reading the full file Read get_insight Get analytics insight over a time range (defaults to last 7 days on the UI). Read get_insight_today Get today Read get_intake_guide Get the INTAKE questionnaire + build flow to run BEFORE creating a new site/store/page. Call this at the start Read get_media_capacity Get media storage capacity/usage for the site. Read get_order Get full order details by ID: customer info, items, payment, shipping, discounts, etc. Read get_page_draft Inspect a local page draft: its meta, the section ids, total section count, and (if a commit is in progress) t Read get_page_element Get full detail of a single element by its ID (e.g. Read get_page_schema Get the authoritative JSON Schema (Draft 2020-12) for a page source Read get_page_source Get page source overview: section count, element type counts, and all custom CSS classes. Use this first, then Read get_page_versions View version history of a page Read get_ppd_variation_template Get the per-variation print/design templates for a product (PPD app). Read get_price_contact Get the Read get_product Get full product details by ID: name, description, price, variations, images, attributes, SEO, etc. Read get_product_measurement Get the product measurement-unit tree (units with exchange values). Read get_promotion Get full promotion details by ID: name, type, schedule, discount rules, coupon settings, items, bonus products Read get_promotion_items Get products/variations/categories attached to a promotion. Returns items with discount details (fixed_prices, Read get_pwa Get the site Read get_review Get one review (with its replies / nested data) by id. Read get_review_products List the products a review is attached to (by review id). Read get_shipping Get the site Read get_site_custom_code Get custom code of the site (CSS/JS). Two modes: - Default: returns ALL 4 code fields (full content) - With fi Read get_site_info Get full site information: name, domain, settings (colors, typography, layout, language, payment methods, etc. Read get_source_cart Get all cart global sources with compact tree view. Shows full element hierarchy — no need to call get_global_ Read get_variation Get a single product variation by its id. Read ingest_html Parse reference HTML into a structural blueprint (title, headings, paragraphs, images, buttons, colour palette Read ingest_url Fetch a public URL and parse it into a structural blueprint (see ingest_html). Note: client-rendered (React/Vu Read list_affiliate_accounts List affiliate accounts (registered affiliates / referrers). Read list_affiliate_orders List affiliate-attributed orders (referrals that converted). Read list_affiliate_payouts List affiliate payout requests/records. Read list_affiliate_products List products enrolled in the affiliate program (with their commission settings). Read list_api_keys List the site Read list_appointment_addresses List appointment locations/addresses. Read list_appointment_calendars List booking calendars (services with availability rules) for the current site. Read list_appointment_classifies List appointment classifies (service categories/types). Read list_appointment_employees List appointment employees (people that appointments can be assigned to). Read list_appointments List booked appointments for the current site. Read list_apps List the site Read list_articles List blog articles (metadata only, without HTML content). Use get_article to get full content Read list_automations List the site Read list_bindings List every dynamic-data BINDING target: the datasets (product, cart_item, order, order_item, post, category, c Read list_blocked_phones List blocked phone numbers (e.g. blacklisted customers). Read list_cached_results List the large results currently held in the session cache (id, label, size, age). Read list_categories List all product categories of the site Read list_cms_files List all CMS files (HTTP functions, cron jobs, ...) for the site Read list_collections List all database collections (tables) for the site. Returns collection names, table names, and field counts. Read list_combos List all combo/bundle products of the site. Use get_combo_items for combo composition details Read list_contacts List contact-form submissions. Read list_courses List courses (Course app). Read list_customer_tags List customer tags for the site. Read list_customers List/search the site Read list_domains List custom domains attached to the site (plus the free subdomain). Read list_elements List all BuilderX element/component types you can place on a page, grouped by category with a one-line summary Read list_employees List the site Read list_entity_logs List the activity/change logs for a specific entity (e.g. an order). Requires the entity id and type. Read list_events List every interaction EVENT you can attach to a node: the triggers (eventName: click/hover/success/submit/…) Read list_font_groups List font groups (font families with weights). Read list_fonts List the site Read list_global_sections List reusable global sections (Header, Footer, shared content blocks) — SLIM summary only. Each entry: id, nam Read list_global_sources List global sources (cart, popup, etc.). Returns compact summary per source. Always provide component to filte Read list_google_merchants List the Google Merchant records linked to the site (read-only). Read list_image_elements Find all image elements across pages + global sources, with element_id, current alt, src, and the field path w Read list_invitations List site invitations for the current account. Read list_materials List product materials for the site. Read list_media_all List folders and content together in one call. Read list_media_content List media-library content (images/videos/files), optionally filtered by folder. Read list_media_folders List media-library folders (optionally under a parent folder). Read list_my_sites List all sites accessible by the current account. Use this to find a site_id before switching Read list_notifications List notifications for the current account. Read list_orders List orders of the site (metadata only). Use get_order for full details including items Read list_page_contents List multi-language contents of a page Read list_page_drafts List local page drafts for the current site (summaries only: id, name, slug, type, section count, commit progr Read list_pages List all pages of the site (metadata only, without source) Read list_partner_feed_products List the products inside a specific product feed. Read list_partner_feeds List product feeds for sale channels (Google Shopping, Facebook, etc.). Read list_ppd List Personal Product Design assignments (products enabled for personalization). Read list_product_brands List product brand tags for the site. Read list_product_suppliers List product supplier tags for the site. Read list_product_tags List product tags (paginated, searchable by name). Read list_products List products of the site (metadata only: id, name, slug, price, image, status). Use get_product for full deta Read list_promotions List all promotions/discounts of the site (metadata only). Use get_promotion for full details Read list_publish_histories List the site Read list_redirect_urls List SEO redirect URLs (301 redirects) for the site. Read list_reviews List product reviews (admin view) for the current site. Requires the product_review app installed. \ Read list_ribbons List ribbons (product sale badges) for the site. Read list_saved_filters List saved table filters for a given table (e.g. Read list_site_utms List marketing UTM links (with view/order stats over the time window). Read list_subscribers List newsletter subscribers. Read list_template_themes Search/list the public Webcake template marketplace (api.storecake.io). Use to match customer brief against ex Read list_themes List all custom themes of the site. Returns theme name, colors, typographies, transitions, and which one is ac Read list_tool_groups List every WebCake tool group, how many tools it has, and whether it is loaded natively or reached on-demand v Read list_translations List translations for a resource type in a target language. Resources: ${RESOURCES.join( Read new_page_skeleton Return an empty but valid page source: { sections: [] }. Add sections built with new_section, then save with b Read Products Products Read query_collection_records Query records from a collection (custom data table) by table name. Supports paging + an optional Read read_cached_result Read a slice of a large cached result produced by another tool (look for Read read_image Fetch an image URL and return its bytes for vision analysis by the AI client. Pair with scan_unique_images to Read read_images Batch fetch multiple image URLs in parallel. Use when comparing several references or extracting motifs across Read refuse_invitation Refuse a site invitation. Read scan_unique_images Scan all images used across page sources, global sources, and global sections. Returns a unique list of image Read search_global_section_elements Search/filter elements within a global section (Header/Footer/block) without dumping the whole tree. Filter by Read search_global_source_elements Search/filter elements within a global source. No component param needed. Examples: - Find all buttons: type= Read search_images Search stock photos (Pexels) for a page/product. IMPORTANT: the storefront only renders images served from the Read search_page_elements Search/filter elements within a page source. Returns matching elements with full detail (id, type, style, text Read search_products Search products by keyword. Returns matching products with basic info Read search_promotions Search/filter promotions with advanced filters: by type, status (coming_soon/in_progress/finished), keyword, d Read search_tools Find WebCake tools by keyword across the FULL catalog — including capabilities NOT loaded natively (marketing/ Read semantic_search_themes Semantic search across the theme marketplace using bge-m3 embeddings (cosine similarity). Use when the brief i Read sync_sitemap Sync a resource type into the site Read validate_page Validate a page source ({ sections: [...] }). Returns errors (block saving: duplicate/missing ids, missing typ
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Webcake Storefront

Can an AI agent delete data through the Webcake Storefront MCP server? +

Yes. The Webcake Storefront server exposes 31 destructive tools including clear_page_draft, delete_affiliate_accounts, delete_affiliate_products. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Webcake Storefront? +

The Webcake Storefront server has 110 write tools including accept_invitation, add_domain, add_draft_section. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Webcake Storefront.

How many tools does the Webcake Storefront MCP server expose? +

287 tools across 4 categories: Destructive, Execute, Read, Write. 137 are read-only. 150 can modify, create, or delete data.

How do I enforce a policy on Webcake Storefront? +

Register the Webcake Storefront MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Webcake Storefront tool call.

Deterministic rules across all 287 Webcake Storefront tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WEBCAKE STOREFRONT →

Instant setup, no code required.

287 Webcake Storefront tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Webcake Storefront's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.