// SCAN REPORT

Vending Machine

13 tools. 6 can modify or destroy data without limits.

5 write tools that can modify data. Rate limits recommended.

Last updated: 2 Jul 2026

6 can modify or destroy data

7 read-only

13 tools total

Community server · catalogue entry verified 02/07/2026

How to control Vending Machine ↓

TOOL MAP

What Vending Machine exposes to your agents

Read (7) Write / Execute (5) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Vending Machine tools

Execute · High run This tool runs arbitrary marketplace scripts identified by code. Execute · High run_code Code execution tools are classified as Execute because their effects are contingent on the code arguments provided. Execute · High audit_code The tool runs an automated security audit pipeline involving multiple specialist agents (Bug Hunter, Test Goblin, etc.). Execute · High hire_agent Based on the server description, hiring an agent implies triggering external agent execution or committing to an external operation.

6 of Vending Machine's 13 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Vending Machine

PolicyLayer is an MCP gateway — it sits between your AI agents and Vending Machine, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "vector_store_add": {
    "limits": [
      {
        "counter": "vector_store_add_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_job": {
    "limits": [
      {
        "counter": "check_job_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Vending Machine — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON VENDING MACHINE →

Instant setup, no code required.

FULL CATALOGUE

All 13 Vending Machine tools

EXECUTE 4 tools

Execute audit_code Full security audit pipeline: Bug Hunter finds vulnerabilities, Test Goblin Execute hire_agent hire_agent Execute run Run a marketplace script by its vending code (e.g. S-7K2M). Execute run_code Run code in a secure E2B sandbox. Returns stdout, stderr, and any errors.

WRITE 1 tools

Write vector_store_add vector_store_add

READ 7 tools

Read check_job Check the status of a background agent job. Read info Get full details about a script: description, validation report, Read list_agents List available Vending Machine agents and their capabilities. Read query_knowledge query_knowledge Read search_scripts Search the marketplace for scripts matching a natural language query. Read vector_store_list List all collections, or list documents in one collection. Read vector_store_search vector_store_search

OTHER 1 tools

Other my_tool my_tool

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Vending Machine

How do I prevent bulk modifications through Vending Machine? +

The Vending Machine server has 1 write tools including vector_store_add. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Vending Machine.

How many tools does the Vending Machine MCP server expose? +

13 tools across 3 categories: Execute, Read, Write. 7 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on Vending Machine? +

Register the Vending Machine MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Vending Machine tool call.

Deterministic rules across all 13 Vending Machine tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VENDING MACHINE →

Instant setup, no code required.

13 Vending Machine tools catalogued and risk-classified — across an index of 43,000+ MCP servers.