autoMate MCP Policy · 128 Tools

TOOL MAP

Read (79) Write / Execute (48) Destructive / Financial (1)

MOST DANGEROUS TOOLS

Critical Risk

Financial · High stripe_create_customer Creating a Stripe customer establishes a financial entity in the payment system that can be charged, subscribed to plans, and billed. Execute · Critical automate This tool delegates execution authority to an autonomous agent that plans and executes actions based on natural language. Execute · High jira_transition_issue Transitioning a Jira issue triggers an external workflow operation that changes the state of a record in an external system. Execute · High sendgrid_send_bulk Sending bulk emails triggers an external operation (email delivery) that cannot be undone.

49 of autoMate's 128 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL AUTOMATE

PolicyLayer is an MCP gateway — it sits between your AI agents and autoMate, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "stripe_create_customer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Rate limit write operations

{
  "notion_append_block": {
    "limits": [
      {
        "counter": "notion_append_block_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "airtable_list_records": {
    "limits": [
      {
        "counter": "airtable_list_records_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register autoMate — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON AUTOMATE →

Free to start. No card required.

ALL 128 AUTOMATE TOOLS

FINANCIAL 1 tools

Financial stripe_create_customer Create a new Stripe customer.

EXECUTE 6 tools

Execute automate Run an autoMate agent loop from a natural-language prompt. autoMate plans, picks tools, fills in para Execute jira_transition_issue jira_transition_issue Execute sendgrid_send_bulk Send an email to multiple recipients via SendGrid. Args: to_emails: Comma-separat Execute telegram_send_message telegram_send_message Execute twilio_send_sms twilio_send_sms Execute weixin_send_template_message weixin_send_template_message

WRITE 42 tools

Write notion_append_block notion_append_block Write slack_reply_thread Reply to a Slack thread. Args: channel: Channel ID. thread_ts: Ti Write airtable_create_record airtable_create_record Write airtable_update_record airtable_update_record Write asana_create_task Create an Asana task. due_on format: YYYY-MM-DD. assignee is an email or GID. Write asana_update_task Update an Asana task. Only provided fields are changed. Write confluence_create_page Create a new Confluence page. content_html is the page body in HTML. Write dingtalk_send_link Send a link card to a 钉钉 group. Args: title: Link title. text: Li Write dingtalk_send_markdown Send a Markdown message to a 钉钉 group via webhook robot. Args: title: Card title Write dingtalk_send_text Send a text message to a 钉钉 group via webhook robot. Args: content: Message text. Write discord_create_dm Send a direct message to a Discord user. Args: user_id: Target user's Discord ID. Write discord_send_message Send a message to a Discord channel. Args: channel_id: Discord channel ID (enable Write feishu_create_doc Create a 飞书 document. Args: title: Document title. content: Optio Write feishu_create_task feishu_create_task Write feishu_send_message feishu_send_message Write gitee_create_issue Create a Gitee issue. Args: owner: Repository owner (username or org). Write gitee_create_pr gitee_create_pr Write github_create_issue github_create_issue Write github_create_pr github_create_pr Write gitlab_create_issue gitlab_create_issue Write gitlab_create_mr gitlab_create_mr Write hubspot_create_contact Create a HubSpot contact. Args: email: Contact email address. fir Write hubspot_create_deal hubspot_create_deal Write jira_create_issue jira_create_issue Write linear_create_issue Create a Linear issue. Args: team_id: Linear team ID (get from linear_list_teams) Write linear_update_issue Update a Linear issue. Args: issue_id: Linear issue ID. state_id: Write mailchimp_add_subscriber Add or update a subscriber in a Mailchimp audience. Args: list_id: Audience/list Write monday_create_item Create a new item (row) on a Monday.com board. Write notion_create_page Create a new Notion page. Args: parent_id: ID of the parent page or database. Write sendgrid_send_email Send an email via SendGrid. Args: to_email: Recipient email address. Write sentry_resolve_issue Mark a Sentry issue as resolved. Args: issue_id: Sentry issue ID to resolve. Write slack_send_message slack_send_message Write teams_send_alert teams_send_alert Write teams_send_card teams_send_card Write teams_send_message Send a message to a Microsoft Teams channel via webhook. Args: text: Message text Write telegram_send_photo Send a photo via Telegram bot. Args: chat_id: Chat ID or @username. Write trello_create_card trello_create_card Write wecom_send_markdown wecom_send_markdown Write wecom_send_text wecom_send_text Write weibo_post Post a new Weibo (微博). Args: text: Weibo content (max 140 Chinese characters). Write yuque_create_doc Create a new document in a Yuque knowledge base. Args: namespace: Knowledge base Write zoom_create_meeting zoom_create_meeting

READ 79 tools

Read airtable_list_records airtable_list_records Read airtable_search_records airtable_search_records Read amap_geocode amap_geocode Read amap_reverse_geocode amap_reverse_geocode Read amap_route_drive Get driving route between two points using 高德地图. Args: origin_lng: Origin longitu Read amap_search_poi amap_search_poi Read asana_get_task Get full details of an Asana task. Read asana_list_projects List all projects in an Asana workspace. Read asana_list_tasks List tasks in an Asana project. Set completed=True to include finished tasks. Read asana_list_workspaces List all Asana workspaces accessible by the current user. Read confluence_get_page Get a Confluence page by ID, including its body content. Read confluence_list_pages_in_space List pages in a specific Confluence space. Read confluence_list_spaces List all Confluence spaces. Read confluence_search_pages Search Confluence pages by text. Returns matching pages. Read discord_get_guild_channels List all channels in a Discord server (guild). Args: guild_id: Discord server (gu Read discord_get_messages Get recent messages from a Discord channel. Args: channel_id: Discord channel ID. Read feishu_list_chats List all 飞书 group chats the bot is in. Read gitee_get_repo Get Gitee repository info. Args: owner: Repository owner. repo: R Read gitee_list_issues gitee_list_issues Read github_get_repo Get GitHub repository info. Args: owner: Repository owner. repo: Read github_list_issues github_list_issues Read github_search_repos github_search_repos Read gitlab_get_project Get GitLab project info. Args: project_id: Project ID or URL-encoded namespace/pr Read gitlab_list_issues gitlab_list_issues Read gitlab_list_pipelines List recent CI/CD pipelines for a GitLab project. Args: project_id: Project ID or Read hubspot_list_deals List recent HubSpot deals. Args: limit: Max deals to return (default 20). Read hubspot_search_contacts Search HubSpot contacts by name, email, or company. Args: query: Search query str Read jira_get_issue jira_get_issue Read jira_search_issues jira_search_issues Read linear_list_issues linear_list_issues Read linear_list_teams List all Linear teams in the workspace. Read mailchimp_list_audiences List all Mailchimp audiences (mailing lists). Read mailchimp_list_campaigns List recent Mailchimp campaigns. Args: limit: Max campaigns to return (default 10 Read monday_get_item Get a specific Monday.com item by ID. Read monday_list_boards List Monday.com boards. Read monday_list_groups List groups (sections) on a Monday.com board. Read monday_list_items List items (rows) on a Monday.com board. Read notion_query_database Query a Notion database. Args: database_id: Database ID. filter_j Read notion_search notion_search Read sendgrid_get_stats Get email delivery statistics for the last N days. Args: days: Number of days to Read sentry_get_issue Get details of a specific Sentry issue. Args: issue_id: Sentry issue ID. Read sentry_list_issues sentry_list_issues Read sentry_list_projects List all Sentry projects in the organization. Read shopify_get_order Get a specific Shopify order by ID. Read shopify_get_product Get a specific Shopify product by ID. Read shopify_get_shop_info Get basic Shopify store information. Read shopify_list_collections List Shopify custom collections. Read shopify_list_customers List Shopify customers. Optionally search by name or email. Read shopify_list_orders List Shopify orders. status: open, closed, cancelled, any. Read shopify_list_products List Shopify products. status: active, draft, archived. Read slack_get_messages Get recent messages from a Slack channel. Args: channel: Channel ID. Read slack_list_channels List public Slack channels. Args: limit: Maximum number of channels to return (de Read stripe_get_balance Retrieve the current Stripe account balance. Read stripe_get_customer Get a specific Stripe customer by ID. Read stripe_list_customers List Stripe customers. Optionally filter by email. Read stripe_list_payments List recent Stripe payment intents. Read stripe_list_products List Stripe products. Read stripe_list_subscriptions List Stripe subscriptions. Optionally filter by customer_id. Read telegram_get_bot_info Get basic info about the Telegram bot. Read telegram_get_updates Get recent messages received by the Telegram bot. Args: limit: Max number of upda Read trello_list_boards List all Trello boards for the authenticated member. Read trello_list_cards List all cards on a Trello board. Args: board_id: Trello board ID (from trello_li Read trello_list_lists List all lists (columns) on a Trello board. Args: board_id: Trello board ID. Read twilio_get_account Get Twilio account info and balance. Read twilio_list_messages List recent SMS messages sent via Twilio. Args: limit: Number of messages to retu Read twitter_get_user twitter_get_user Read twitter_get_user_tweets Get recent tweets from a specific user. Args: user_id: Twitter user ID (get from Read twitter_search_tweets twitter_search_tweets Read wecom_get_department_users Get user list from a 企业微信 department. Args: department_id: Department ID (1 = roo Read weibo_get_my_info Get current user's Weibo profile. Read weibo_get_timeline Get your Weibo home timeline. Args: count: Number of posts to retrieve (max 100). Read weixin_get_followers Get the list of followers (OpenIDs) for the WeChat Official Account. Read weixin_get_user_info Get profile information for a WeChat follower. Args: openid: Follower's OpenID. Read yuque_get_doc yuque_get_doc Read yuque_get_user Get current authenticated Yuque user info. Read yuque_list_docs yuque_list_docs Read yuque_list_repos List Yuque knowledge bases (repos) for a user or org. Args: login: User/org login Read zoom_get_meeting Get Zoom meeting details. Args: meeting_id: Zoom meeting ID. Read zoom_list_meetings List upcoming scheduled Zoom meetings. Args: limit: Max meetings to return (defau

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent move money through the autoMate MCP server? +

Yes. The autoMate server exposes 1 financial tools including stripe_create_customer. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

How do I prevent bulk modifications through autoMate? +

The autoMate server has 42 write tools including notion_append_block, slack_reply_thread, airtable_create_record. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach autoMate.

How many tools does the autoMate MCP server expose? +

128 tools across 3 categories: Execute, Read, Write. 79 are read-only. 49 can modify, create, or delete data.

How do I enforce a policy on autoMate? +

Register the autoMate MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

autoMate

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL AUTOMATE

// ALL 128 AUTOMATE TOOLS

// RELATED SERVERS

// FAQ

Enforce policy on every autoMate tool call.

TOOL MAP

MOST DANGEROUS TOOLS

HOW TO CONTROL AUTOMATE

ALL 128 AUTOMATE TOOLS

RELATED SERVERS

FAQ