# Mcp MCP server Agent View of the PolicyLayer registry record for Mcp: identity, probed posture, risk grade, and all 26 tools classified. HTML page: https://policylayer.com/tools/ai-dataecho-mcp ## Facts - Server id: `https://dataecho.ai/mcp` - Homepage: https://github.com/mohocp/dataecho - Registry record: grade F, identity unverified - Lifecycle: active - Auth posture: open - CORS policy: * - Rate-limited: no - Tools: 26 (22 with introspected schema) - Tool categories present: Destructive, Read, Write - Tags: ai dataecho mcp, admin - Record last modified: 2026-07-09T08:36:58.143Z ## Tools (26) | Tool | Category | Risk | Record | | --- | --- | --- | --- | | `delete_site` | Destructive | Critical | https://policylayer.com/tools/ai-dataecho-mcp/delete-site.md | | `delete_variable` | Destructive | Critical | https://policylayer.com/tools/ai-dataecho-mcp/delete-variable.md | | `drive_delete_file` | Destructive | Critical | https://policylayer.com/tools/ai-dataecho-mcp/drive-delete-file.md | | `drive_revoke_token` | Destructive | Critical | https://policylayer.com/tools/ai-dataecho-mcp/drive-revoke-token.md | | `app_status` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/app-status.md | | `drive_history` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/drive-history.md | | `drive_list_files` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/drive-list-files.md | | `drive_read_file` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/drive-read-file.md | | `drive_tokens` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/drive-tokens.md | | `get_site` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/get-site.md | | `list_drives` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/list-drives.md | | `list_sites` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/list-sites.md | | `list_variables` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/list-variables.md | | `platform_info` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/platform-info.md | | `search_sites` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/search-sites.md | | `verify_login_code` | Read | Low | https://policylayer.com/tools/ai-dataecho-mcp/verify-login-code.md | | `claim_site` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/claim-site.md | | `create_drive` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/create-drive.md | | `drive_move_file` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/drive-move-file.md | | `drive_restore` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/drive-restore.md | | `drive_share` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/drive-share.md | | `drive_write_file` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/drive-write-file.md | | `publish_site` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/publish-site.md | | `request_login_code` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/request-login-code.md | | `set_variable` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/set-variable.md | | `update_site_metadata` | Write | Medium | https://policylayer.com/tools/ai-dataecho-mcp/update-site-metadata.md | ## Tool descriptions - `delete_site` — Permanently delete an owned site. Irreversible — confirm with the user first. - `delete_variable` — Delete an account variable. - `drive_delete_file` — Delete one file from a drive. - `drive_revoke_token` — Revoke a drive share token. - `app_status` — Build/run status of a container app deployed via publish_site with a Dockerfile. Poll until status is live or failed. - `drive_history` — Version timeline of a drive (every write is a restorable version). - `drive_list_files` — List files in a drive (by drive name or drv_… id), optionally under a path prefix. - `drive_read_file` — Read a file from a drive. Text comes back as utf-8 content; binary as contentBase64. Files over 1 MB are refused (use the skill scripts). - `drive_tokens` — List active share tokens of a drive (secrets are never shown again). - `get_site` — Full details + current file manifest of an owned site. - `list_drives` — List the authenticated account's private cloud drives. - `list_sites` — List all sites owned by the authenticated account. - `list_variables` — List account variable NAMES (values are write-only — they are injected into proxy calls and container apps, never read back). - `platform_info` — DataEcho platform overview: what it can host, auth state of this connection, docs links. Call this first if unsure. - `search_sites` — Full-text search across the authenticated account's sites (names, metadata, and text content). - `verify_login_code` — Complete sign-in with the emailed code. Returns the apiKey ONCE — configure it as the Authorization: Bearer header of this MCP connection (and/or save to ~/.artifact/credentials for the CLI scripts). Never echo it into chat. - `claim_site` — Make a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site). - `create_drive` — Create a new private drive. - `drive_move_file` — Move/rename a file inside a drive. - `drive_restore` — Restore a drive to a prior version (commits a new version; nothing is lost). - `drive_share` — Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL like 7d). The secret is returned ONCE. - `drive_write_file` — Write/overwrite one file in a drive (ETag-safe: pass ifMatch to assert the version you read, otherwise the current version is used automatically). - `publish_site` — Deploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). With slug → UPDATE that site (complete snapshot: send ALL files). A Dockerfile in the files … - `request_login_code` — Start sign-in: email a one-time code to the user. Follow with verify_login_code. - `set_variable` — Create/update a write-only account secret (uppercase name). Injected as env vars into container apps and as ${VAR} into proxy calls. Optionally pin which upstream hosts may receive it. - `update_site_metadata` — Patch site settings without redeploying: viewer title/description, SPA mode, TTL, password (string sets, null removes). ## Related servers - UnClick (1658 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md - Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md - Yaver (811 tools) — https://policylayer.com/tools/io-github-kivanccakmak-yaver.md - Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md - Pfsense (680 tools) — https://policylayer.com/tools/abl030-pfsense-mcp.md - AdButler (622 tools) — https://policylayer.com/tools/adbutler.md - Crow (587 tools) — https://policylayer.com/tools/kh0pper-crow.md - Fortimanager (584 tools) — https://policylayer.com/tools/jmpijll-fortimanager-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=ai-dataecho-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/ai-dataecho-mcp