# Open Mcp Apps MCP server

Agent View of the PolicyLayer registry record for Open Mcp Apps: identity, probed posture, risk grade, and all 32 tools classified. HTML page: https://policylayer.com/tools/2nd1st-open-mcp-apps

## Facts

- Server id: `@2nd1st/open-mcp-apps`
- Install: `npx -y @2nd1st/open-mcp-apps`
- Homepage: https://github.com/2nd1st/open-mcp-apps
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 32
- Tool categories present: Destructive, Execute, Read, Write
- Tags: 2nd1st open mcp apps, admin, automation
- Record last modified: 2026-09-28T07:38:36.755Z

## Tools (32)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `data_delete_item` | Destructive | Critical | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-delete-item.md |
| `delete_app` | Destructive | Critical | https://policylayer.com/tools/2nd1st-open-mcp-apps/delete-app.md |
| `file_delete` | Destructive | Critical | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-delete.md |
| `call_function` | Execute | High | https://policylayer.com/tools/2nd1st-open-mcp-apps/call-function.md |
| `app_store_list` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/app-store-list.md |
| `data_changes` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-changes.md |
| `data_list` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-list.md |
| `file_list` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-list.md |
| `file_read` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-read.md |
| `get_app` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/get-app.md |
| `get_app_guide` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/get-app-guide.md |
| `get_app_html` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/get-app-html.md |
| `get_data_version` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/get-data-version.md |
| `get_ui_preference_schema` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/get-ui-preference-schema.md |
| `list_app_checkpoints` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/list-app-checkpoints.md |
| `list_apps` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/list-apps.md |
| `list_data_collections` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/list-data-collections.md |
| `preview_app_store_entry` | Read | Low | https://policylayer.com/tools/2nd1st-open-mcp-apps/preview-app-store-entry.md |
| `apply_data_writes` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/apply-data-writes.md |
| `data_add_item` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-add-item.md |
| `data_move_item` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-move-item.md |
| `data_update_item` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/data-update-item.md |
| `edit_app` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/edit-app.md |
| `file_write` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-write.md |
| `file_write_begin` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-write-begin.md |
| `file_write_chunk` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-write-chunk.md |
| `file_write_commit` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/file-write-commit.md |
| `install_from_app_store` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/install-from-app-store.md |
| `promote_app` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/promote-app.md |
| `restore_app` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/restore-app.md |
| `save_app` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/save-app.md |
| `security_set` | Write | Medium | https://policylayer.com/tools/2nd1st-open-mcp-apps/security-set.md |

## Tool descriptions

- `data_delete_item` — Delete an item permanently. May return reason:\
- `delete_app` — Delete an app from the registry. Default data:\
- `file_delete` — Permanently delete one file an app has stored.
- `call_function` — Run a function an app declares (manifest.functions) — data in, data out, no UI needed. The body is code the app
- `app_store_list` — Browse the built-in App Store: ready-made, high-quality apps shipped with the engine that the user can install into their registry. Shows install state. Renders no UI — open_app {app: \
- `data_changes` — What happened in a collection after a ledger position YOU hold — including edits the USER made in the widget, which never pass through you. Any mark you already have works as
- `data_list` — Read items in full — every field, plus the item id you need to update or delete it. No UI (use open_app for that). Returns a PAGE: up to
- `file_list` — List the files an app (app) has stored — a PAGE of {path, size, mime, version} plus usage totals; limit/cursor page through, prefix narrows. These are opaque user files (attachments, exports) the app keeps — separate from its structured …
- `file_read` — Read one file an app has stored, as a WINDOW of its bytes: offset/length select it, data_base64 carries exactly that window, next_offset continues (same window grammar as get_app, and for the same reason). Reassemble by concatenating dec…
- `get_app` — Read an app
- `get_app_guide` — The authoring contract for creating or editing an app: the window.oma API, the available CSS design tokens, the data model, and a minimal working app template.
- `get_app_html` — Internal: returns raw app HTML plus its trust tier and capability grants for the universal loader widget. Not useful to call directly — use get_app to read source.
- `get_data_version` — The cheapest possible change check: returns the store
- `get_ui_preference_schema` — The engine-owned catalog of SHARED preferences (key, type, label, default, options) that the settings app renders. Apps read effective values via oma.pref(); this tool only describes what exists. Read-only.
- `list_app_checkpoints` — List an app
- `list_apps` — List UI apps in the registry (reusable across all chats). Lists the user
- `list_data_collections` — List every data collection that exists (name, item count, last activity). Use when unsure where data lives, what boards the user has, or which collection to bind an app to. Renders no UI.
- `preview_app_store_entry` — Internal: returns an App Store entry
- `apply_data_writes` — Apply up to 200 writes in ONE transaction — for applying many known rows in one go instead of one call per row. Each command is exactly what you would send to data_add_item / data_update_item / data_move_item, as {type, ...args}: type is…
- `data_add_item` — Add an item to a collection.
- `data_move_item` — Move an item to another group and/or position (e.g. kanban column).
- `data_update_item` — Shallow-merge fields into an item (set a key to null to remove it). Uses optimistic concurrency.
- `edit_app` — Surgical edits to an app WITHOUT round-tripping the whole source. Two edit forms, mixable: RANGE {offset, length, expect_hash, new_string} replaces a span you read with get_app (cheapest — echo the window
- `file_write` — Store a file for an app (create or overwrite by path).
- `file_write_begin` — Start a chunked upload for a file too big for file_write
- `file_write_chunk` — Append the next chunk of bytes (base64) to an upload started with file_write_begin. Send chunks strictly in order, one at a time. Pass
- `file_write_commit` — Finalize an upload as an app file (create or overwrite by path) — the chunked equivalent of file_write. The upload is consumed either way; on failure, restart from file_write_begin.
- `install_from_app_store` — Install (or update) a ready-made app from the built-in App Store into the user
- `promote_app` — Upgrade a kind:\
- `restore_app` — Roll an app back to one of its earlier checkpoints: re-saves that checkpoint
- `save_app` — Create or update a UI app in the persistent registry. Two slots, each optional on update (an omitted slot keeps its current value): ui — the complete self-contained HTML document (contract in get_app_guide; window.oma, no external resour…
- `security_set` — Privileged writer for reserved settings keys (security:* / policy:*) — the ONLY tool that can write them; the generic data_* tools refuse reserved keys. Upserts one key/value in the settings collection.

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Apibase (1384 tools) — https://policylayer.com/tools/io-github-whiteknightonhorse-apibase.md
- Delx Mcp A2a (1068 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- MCP Framework Personal (912 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Hermoso (896 tools) — https://policylayer.com/tools/hermoso.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- Altium-MCP-Suite (817 tools) — https://policylayer.com/tools/altium-mcp-suite.md
- Eda Agent (777 tools) — https://policylayer.com/tools/eda-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=2nd1st-open-mcp-apps · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/2nd1st-open-mcp-apps