// SCAN REPORT

Upwork

11 tools. 5 can modify or destroy data without limits.

5 write tools that can modify data. Rate limits recommended.

Last updated: 12 Jun 2026

5 can modify or destroy data

6 read-only

11 tools total

Community server · catalogue entry verified 12/06/2026

How to control Upwork ↓

TOOL MAP

What Upwork exposes to your agents

Read (6) Write / Execute (5) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Upwork tools

Write · High manual_login This tool modifies persistent authentication state by saving session cookies, enabling future tool executions without re-authentication. Write · High save_session save_session writes credential or session data to storage, enabling persistent authenticated access to Upwork. Write · Medium send_message The tool creates new messages, which is a Write operation (creates/modifies data reversibly). Write · High submit_proposal Submitting a proposal creates a new binding communication artifact on Upwork that establishes the freelancer's application for a job contract.

5 of Upwork's 11 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Upwork

PolicyLayer is an MCP gateway — it sits between your AI agents and Upwork, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "manual_login": {
    "limits": [
      {
        "counter": "manual_login_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_job": {
    "limits": [
      {
        "counter": "analyze_job_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Upwork — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON UPWORK →

Free to start. No card required.

FULL CATALOGUE

All 11 Upwork tools

WRITE 5 tools

Write manual_login Connect to existing Chrome tab via CDP and save Upwork session cookies. Run connect-chrome.bat first, then cal Write save_session Alias for manual_login — re-save session from current Chrome tab. Write send_message Send a message in an Upwork conversation. Write submit_proposal Submit a proposal for an Upwork job. Call get_job_details first to get screening questions. Write update_profile Update your Upwork profile fields: title, description/bio, hourly_rate, skills.

READ 6 tools

Read analyze_job Score a job opportunity 0-100 across 5 dimensions: niche fit, client quality, budget fit, competition, clarity Read get_job_details Get full job details: description, screening questions, client history, budget. Call this before submit_propos Read get_messages Read Upwork messages. Without room_id: lists conversations. With room_id: reads full message history. Read get_profile Get your Upwork freelancer profile, title, skills, hourly rate, JSS score, connects balance. Read get_proposals Get your submitted proposals with status and client response. Read search_jobs Search Upwork jobs. Optimized for n8n/automation niche. Returns job list with budget, client info, proposal co

FAQ

Questions about Upwork

How do I prevent bulk modifications through Upwork? +

The Upwork server has 5 write tools including manual_login, save_session, send_message. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Upwork.

How many tools does the Upwork MCP server expose? +

11 tools across 2 categories: Read, Write. 6 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on Upwork? +

Register the Upwork MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Upwork tool call.

Deterministic rules across all 11 Upwork tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON UPWORK →

Free to start. No card required.

11 Upwork tools catalogued and risk-classified — across an index of 43,000+ MCP servers.