// SCAN REPORT

Gradescope MCP Server

37 tools. 12 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 12 Jun 2026

12 can modify or destroy data

25 read-only

37 tools total

Community server · catalogue entry verified 12/06/2026

How to control Gradescope MCP Server ↓

TOOL MAP

What Gradescope MCP Server exposes to your agents

Read (25) Write / Execute (9) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Gradescope MCP Server tools

Destructive · High tool_delete_rubric_item Deletion of rubric items is irreversible and directly impacts grading frameworks that instructors and TAs rely on. Write · High tool_apply_grade This tool creates or modifies grade data in an educational system. Write · High tool_apply_grade_batch Batch grade application modifies student records (grades) reversibly—instructors can regrade or adjust scores—making it a Write operation. Write · Medium tool_create_rubric_item Creating rubric items modifies grading criteria data within Gradescope, which is a reversible Write operation.

12 of Gradescope MCP Server's 37 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Gradescope MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Gradescope MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "tool_delete_rubric_item": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "tool_grade_answer_group": {
    "limits": [
      {
        "counter": "tool_grade_answer_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "tool_assess_submission_readiness": {
    "limits": [
      {
        "counter": "tool_assess_submission_readiness_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Gradescope MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GRADESCOPE →

Free to start. No card required.

FULL CATALOGUE

All 37 Gradescope MCP Server tools

DESTRUCTIVE 1 tools

Destructive tool_delete_rubric_item tool_delete_rubric_item

WRITE 9 tools

Write tool_grade_answer_group tool_grade_answer_group Write tool_apply_grade tool_apply_grade Write tool_apply_grade_batch tool_apply_grade_batch Write tool_create_rubric_item tool_create_rubric_item Write tool_modify_assignment_dates tool_modify_assignment_dates Write tool_rename_assignment Rename an assignment on Gradescope. Write tool_set_extension tool_set_extension Write tool_update_rubric_item tool_update_rubric_item Write tool_upload_submission tool_upload_submission

READ 25 tools

Read tool_assess_submission_readiness tool_assess_submission_readiness Read tool_cache_relevant_pages tool_cache_relevant_pages Read tool_get_answer_group_detail tool_get_answer_group_detail Read tool_get_answer_groups tool_get_answer_groups Read tool_get_assignment_details Get detailed information about a specific assignment. Read tool_get_assignment_graders Get the list of graders assigned to a specific question (instructor/TA only). Read tool_get_assignment_outline tool_get_assignment_outline Read tool_get_assignment_statistics tool_get_assignment_statistics Read tool_get_assignment_submissions tool_get_assignment_submissions Read tool_get_assignments Get all assignments for a specific Gradescope course. Read tool_get_course_roster Get the full roster (students, TAs, instructors) for a course. Read tool_get_extensions Get all student extensions for a specific assignment. Read tool_get_grading_progress tool_get_grading_progress Read tool_get_next_ungraded tool_get_next_ungraded Read tool_get_question_rubric tool_get_question_rubric Read tool_get_regrade_detail tool_get_regrade_detail Read tool_get_regrade_requests tool_get_regrade_requests Read tool_get_student_assignment_link tool_get_student_assignment_link Read tool_get_student_submission Get a specific student's most recent submission (instructor/TA only). Read tool_get_student_submission_map tool_get_student_submission_map Read tool_get_submission_grading_context tool_get_submission_grading_context Read tool_list_courses List all Gradescope courses for the authenticated user. Read tool_list_question_submissions tool_list_question_submissions Read tool_smart_read_submission tool_smart_read_submission Read tool_export_assignment_scores tool_export_assignment_scores

OTHER 2 tools

Other tool_prepare_answer_key tool_prepare_answer_key Other tool_prepare_grading_artifact tool_prepare_grading_artifact

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Gradescope MCP Server

Can an AI agent delete data through the Gradescope MCP Server MCP server? +

Yes. The Gradescope MCP Server server exposes 1 destructive tools including tool_delete_rubric_item. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Gradescope MCP Server? +

The Gradescope MCP Server server has 9 write tools including tool_grade_answer_group, tool_apply_grade, tool_apply_grade_batch. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Gradescope MCP Server.

How many tools does the Gradescope MCP Server MCP server expose? +

37 tools across 3 categories: Destructive, Read, Write. 25 are read-only. 12 can modify, create, or delete data.

How do I enforce a policy on Gradescope MCP Server? +

Register the Gradescope MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Gradescope MCP Server tool call.

Deterministic rules across all 37 Gradescope MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GRADESCOPE →

Free to start. No card required.

37 Gradescope MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.