// SCAN REPORT

AppFlowy MCP

73 tools. 46 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

46 can modify or destroy data

27 read-only

73 tools total

Community server · catalogue entry verified 02/07/2026

How to control AppFlowy MCP ↓

TOOL MAP

What AppFlowy MCP exposes to your agents

Read (27) Write / Execute (39) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous AppFlowy MCP tools

Destructive · Critical appflowy_delete_workspace This tool irreversibly deletes an entire workspace and all contained data with no undo capability. Destructive · High appflowy_delete_chat This tool permanently removes chat data without the ability to undo the action. Destructive · High appflowy_delete_page_from_trash This tool irreversibly removes data from the system. Destructive · High appflowy_delete_quick_note The tool performs an irreversible deletion of user data (a quick note).

46 of AppFlowy MCP's 73 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control AppFlowy MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and AppFlowy MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "appflowy_delete_chat": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "appflowy_accept_invitation": {
    "limits": [
      {
        "counter": "appflowy_accept_invitation_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "appflowy_chat_ask": {
    "limits": [
      {
        "counter": "appflowy_chat_ask_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register AppFlowy MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON APPFLOWY →

Instant setup, no code required.

FULL CATALOGUE

All 73 AppFlowy MCP tools

DESTRUCTIVE 7 tools

Destructive appflowy_delete_chat Delete an AI chat. Destructive appflowy_delete_page_from_trash Permanently delete a trashed page. Destructive appflowy_delete_quick_note Delete a quick note. Destructive appflowy_delete_workspace Permanently delete a workspace and everything in it. Irreversible. Destructive appflowy_empty_trash Permanently delete ALL trashed pages in a workspace. Irreversible. Destructive appflowy_move_page_to_trash Move a page to trash. Destructive appflowy_remove_members Remove members from a workspace by email.

WRITE 39 tools

Write appflowy_accept_invitation Accept a workspace invitation by invite_id. Write appflowy_append_blocks_to_page Append raw AppFlowy document blocks to the end of a page. Write appflowy_append_markdown_to_page Append Markdown content to an existing document page. Write appflowy_append_page_content Append generated content to a page, using Markdown by default. Write appflowy_append_text_to_page Append one or more plain-text paragraph blocks to the end of a page. Write appflowy_create_chat appflowy_create_chat Write appflowy_create_database_field Add a new field (column) to a database. Write appflowy_create_markdown_page Create a document page from Markdown content. Prefer appflowy_save_page for general AI answer or note saving. Write appflowy_create_page Create a page under a space or parent page. Write appflowy_create_quick_note Create a quick note from plain text (or raw block data). Write appflowy_create_row Create a new row in a database. Write appflowy_create_space Create a space in a workspace. Write appflowy_create_workspace Create a new workspace. Write appflowy_duplicate_page Duplicate a page and all of its child pages. Write appflowy_favorite_page Favorite, unfavorite, pin, or unpin a page. Write appflowy_import_markdown_directory Import a local Markdown folder tree into AppFlowy. Write appflowy_import_markdown_file Import one local Markdown file into AppFlowy. Write appflowy_invite_members Invite people to a workspace by email with a role (Owner, Member, Guest). Write appflowy_leave_workspace Leave a workspace you are a member of. Write appflowy_login Login to AppFlowy. Tokens are stored in the server; they are not returned to avoid leaking credentials into to Write appflowy_move_page appflowy_move_page Write appflowy_publish_page Publish a page to the web so anyone with the link can view it. Write appflowy_refresh_token Refresh the access token. Uses the stored refresh token unless one is provided. Tokens are not returned. Write appflowy_reorder_favorite appflowy_reorder_favorite Write appflowy_reorder_pages Reorder the children of an AppFlowy space or page. Write appflowy_restore_all_from_trash Restore all trashed pages in a workspace. Write appflowy_restore_page_from_trash Restore a page from trash. Write appflowy_save_page Save generated content as a new AppFlowy page, using Markdown by default. Write appflowy_set_publish_namespace Rename the workspace publish namespace. Write appflowy_unpublish_page Unpublish a page from the web. Write appflowy_update_chat_settings Update an AI chat Write appflowy_update_member Update a workspace member Write appflowy_update_page Update a page name, icon, lock state, or extra metadata. Write appflowy_update_quick_note Replace a quick note Write appflowy_update_space Update a space name, icon, color, or permission. Write appflowy_update_workspace Update a workspace name and/or icon. Write appflowy_update_workspace_settings Update workspace settings: disable_search_indexing and/or ai_model. Write appflowy_upload_file Upload a local file to AppFlowy file storage. Write appflowy_upsert_row Update existing row or create if it doesn

READ 27 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about AppFlowy MCP

Can an AI agent delete data through the AppFlowy MCP server? +

Yes. The AppFlowy MCP server exposes 7 destructive tools including appflowy_delete_chat, appflowy_delete_page_from_trash, appflowy_delete_quick_note. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through AppFlowy MCP? +

The AppFlowy MCP server has 39 write tools including appflowy_accept_invitation, appflowy_append_blocks_to_page, appflowy_append_markdown_to_page. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach AppFlowy MCP.

How many tools does the AppFlowy MCP server expose? +

73 tools across 3 categories: Destructive, Read, Write. 27 are read-only. 46 can modify, create, or delete data.

How do I enforce a policy on AppFlowy MCP? +

Register the AppFlowy MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every AppFlowy MCP tool call.

Deterministic rules across all 73 AppFlowy MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON APPFLOWY →

Instant setup, no code required.

73 AppFlowy MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.