New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice
174368 tools

WRITE MCP TOOLS

Tools that create or modify resources. Medium risk -- rate limits recommended.

Real-world attack patterns documented against write-class MCP tools. Each links to the full case and the defensive policy.

Browse the full MCP Attack Database →

generate_manifest_draft Generate a first-draft agent manifest (CLAUDE.md / AGENTS.md / GEMINI.md) grounded in the repository README and description. Uses your ANTHROPIC_AP... get_ci_workflow Generate a GitHub Actions workflow YAML that gates pull requests on the Clarx AI-readiness score (npx @clarxai/cli). Write the result to .github/wo... suggest_manifest_fix Write one well-formed markdown section of an agent manifest (CLAUDE.md / AGENTS.md) to close a finding from analyze_manifest. Uses your ANTHROPIC_A... claim_site Make a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site). create_drive Create a new private drive. drive_move_file Move/rename a file inside a drive. drive_restore Restore a drive to a prior version (commits a new version; nothing is lost). drive_share Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL like `7d`). The secret is returned ONCE. drive_write_file Write/overwrite one file in a drive (ETag-safe: pass ifMatch to assert the version you read, otherwise the current version is used automatically). publish_site Deploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). Wi... request_login_code Start sign-in: email a one-time code to the user. Follow with verify_login_code. set_variable Create/update a write-only account secret (uppercase name). Injected as env vars into container apps and as ${VAR} into proxy calls. Optionally pin... + 632 more Every Mcp tool, risk-classified, on the server page.
add_attachment Add an attachment to a Huly object. Provide ONE of: filePath (local file - preferred), fileUrl (fetch from URL), or data (base64). Returns the atta... add_comment Add a comment to a Huly issue. Comment body supports markdown formatting. add_document_attachment Add an attachment to a Huly document. Convenience method that finds the document by teamspace and title/ID. Provide ONE of: filePath, fileUrl, or d... add_issue_attachment Add an attachment to a Huly issue. Convenience method that finds the issue by project and identifier. Provide ONE of: filePath, fileUrl, or data. add_issue_label Add a tag/label to a Huly issue. Creates the tag if it doesn add_issue_relation Add a relation between two issues. Relation types: add_organization_channel Add a contact channel (phone, email, website/homepage, LinkedIn, Twitter, GitHub, Facebook, Telegram) to an organization identified by ID or exact ... add_organization_member Link a person as a member of an organization. The person appears under the org add_reaction Add an emoji reaction to an activity message. add_template_child Add a child (sub-task) template to an issue template. The child defines default values for sub-issues created when using create_issue_from_template... add_test_plan_item Add a test case to a test plan. Resolves test case by ID or name. Optionally assign a person by email or name. add_thread_reply Add a reply to a message thread. Reply body supports markdown formatting. + 369 more Every Huly tool, risk-classified, on the server page.

MCP SERVER

372 All Mcp Server tools →
marchward_bind_policy Attach a governance policy to an agent. After binding, every authorize and execute call from that agent is evaluated against this policy. marchward_register_agent Register a new agent with Marchward so it is governed from its first action. Returns the agent record and its Marchward API key — the only credenti... register_webhook Register an HTTPS endpoint to receive event notifications. The response returns a signing secret request_document_upload Get a one-time drag-and-drop upload page URL to give the user so they can upload a PDF upload_document Upload a base64-encoded PDF to an existing transaction (≤10MB inline; use presign for larger). bind_email ★ WHAT THIS DOES AND DOES NOT DO — binding makes a key RECOVERABLE (lose it, call `recover_my_key`, it is re-sent to that inbox). It does NOT make ... claim_free_key ★ BEFORE YOU MINT — TWO THINGS THAT ARE CHEAPER THAN A KEY. (1) You do NOT need a key to start: DC Hub answers KEYLESS at free depth, so if you jus... export_dataset Use when a user wants to pull their saved DC Hub shortlist OUT of the platform for offline analysis, a spreadsheet, or ingestion into another tool ... generate_site_analysis Use when a user wants a SHAREABLE, branded multi-page Site Analysis PDF for ONE lat/lon (a powered-land parcel, a candidate campus) — the polished ... hyperscaler_deals Hyperscaler AI Deal Tracker — live feed of Stargate, OpenAI, Anthropic, Microsoft, Oracle, CoreWeave, AMD, NVIDIA, sovereign-AI deals. Pulls from d... plan_fiber_leadin Plan N diverse, road-following fibre lead-in routes from a candidate data-center site to a carrier hotel / POP, with indicative build cost and a ro... plan_query INSPECT-ONLY — returns the plan WITHOUT running it. For a real multi-step DC Hub question call `execute_plan(intent="...")` instead: it uses the SA... + 360 more Every Mcp Server tool, risk-classified, on the server page.

TDMCP — TOUCHDESIGNER MCP SERVER

359 All tdmcp — TouchDesigner MCP server tools →
add_custom_parameters Transactionally add, edit, delete, sort, and organize a COMP add_timecode_overlay Overlay a running HH:MM:SS:FF timecode (or a countdown) onto an input TOP as VISUAL pixels — a Text TOP whose text expression re-evaluates every fr... animate_parameter Drive one or more node parameters over time with an LFO (sine/triangle/ramp/square/pulse/random). Creates an LFO CHOP and binds each target so it o... apply_lut Apply a colour Look-Up Table (LUT) to an existing TOP inside a self-contained apply_post_processing Chain post-processing effects (bloom, glitch, rgb_split, vignette, etc.) onto an existing TOP, applied in the order given. Creates a new baseCOMP u... apply_recipe Instantiate a built-in recipe by id (from list_recipes) inside a COMP — a tested, ready-made network you can build in one call, then tweak. Creates... arrange_network Tidy an existing network into a readable left→right data-flow layout, or use layout_mode=explicit for one bounded, atomic exact-coordinate mutation... atem_switcher_control Create an OSC control preset for an ATEM switcher routed through atemOSC, Bitfocus Companion, or another OSC relay. This does not use the Blackmagi... attach_docs_as_assets Copy documentation files into a package and register them in its manifest author_script_operator Scaffold a Script CHOP/DAT/SOP/TOP with a ready-to-edit onCook(scriptOp) stub and auto_tag_library_asset Inspect a captured library asset (a vault recipe/component note, or a live TD COMP) and emit a suggested tag set, difficulty, and one-line descript... auto_ui_from_params Generate a performable control panel from an existing node/COMP + 347 more Every tdmcp — TouchDesigner MCP server tool, risk-classified, on the server page.

TORCH-TO-CROWN

355 All Torch-to-Crown tools →
add_monster Bring a compendium monster onto the field mid-combat (reinforcements, a summons). side defaults to add_room_note Add a table note to a room — it will surface as a contradiction when the room is re-read. adjudicate_shape_change_property Record a referee resolution for one exact magical property printed in the current canonical form; the engine refuses properties absent from that so... adjust_character_resources Durably add or spend carried gold, ammunition, or named material components. Negative changes cannot overdraw. Use stable names such as arrows, bol... advance_antipathy_discomfort Apply one round of the printed cumulative Dexterity loss to an eligible creature that saved and remains near Antipathy, capped at four points with ... advance_character Atomically train one eligible class to its next level. For multi/dual-class characters give class_slug; the saved per-class XP ledger, equal multic... advance_clone_growth Mature a Clone after its retained 2d4 calendar months, or interrupt growth and create the printed utterly insane premature clone. advance_creeping_doom_round Advance the durable swarm by one completed combat round and end it exactly after four rounds per druid level. Call once after resolving that round advance_days Advance downtime by days: progresses tracked plague/infection through incubation, illness, fatal outcome or one-point-per-day characteristic recovery. advance_dig Excavate the next 5ft cube, resolve creatures directly beneath it without a save, edge creatures by the printed lower-than-Dexterity d20 check, and... advance_duo_dimension_round Advance one completed round and end the durable form exactly after three rounds plus one per caster level. advance_incendiary_cloud Advance one cloud round, update exact membership, retain pyrotechnic smoke, and resolve the third-through-fifth-round flame saves and damage. + 343 more Every Torch-to-Crown tool, risk-classified, on the server page.
serac_store Store encrypted data in an isolated namespace on OVHCloud France. Data must be base64-encoded and client-side encrypted. snow_activate_pi_solution ✅ Activate trained ServiceNow Predictive Intelligence solution for production use. Enables predictions on records. snow_add_comment Add comment/work note to record snow_add_dashboard_widget Attach a widget to an existing dashboard (sys_dashboard) with a widget type and optional title and position. Writes to sys_dashboard_widget. snow_add_form_field Add a field (element) to a form section by section sys_id, with optional field type and ordering position. Writes to sys_ui_element. snow_add_list_column Add a column (field) to the default list layout of a table by writing to sys_ui_list_element, with optional position and pixel width. Changes how t... snow_add_schedule_entry Add a span (cmn_schedule_span) to a schedule that either includes or excludes a window of time. Use to model holidays, blackout periods, or extra c... snow_agile_backlog_groom Backlog grooming operations: reprioritize stories, bulk-update story points, move stories between epics, and assign stories to sprints in batch. snow_agile_epic_manage Manage Agile epics: create/update epics, link stories, view progress breakdown. Works with ServiceNow rm_epic table. snow_agile_release_manage Manage Agile releases: create/update releases, link sprints and epics, check release readiness with story completion status. snow_agile_sprint_manage Manage Agile sprints: create new sprints, start/close sprints, update sprint details. Works with ServiceNow Agile 2.0 (rm_sprint table). snow_agile_story_manage Create and update user stories in ServiceNow Agile 2.0. Assign story points, link to sprints/epics, manage acceptance criteria, and update state. + 207 more Every Serac tool, risk-classified, on the server page.
caddy_add_federation_site Add a federation-aware reverse-proxy site block. Emits directives for the chosen profile (matrix | activitypub | peertube | generic-ws) — websocket... caddy_add_matrix_federation_port Add a :8448 site block with its own Let caddy_add_site Add a reverse-proxy site block to the Caddyfile and reload. For anything beyond caddy_set_wellknown Add or replace a standalone /.well-known/ handler at a domain that does NOT otherwise proxy to the federated app. Use this on an apex domain to del... changedetection_create_watch Add a new URL to watch. Change Detection will begin polling it on its default schedule. crow_accept_bot_invite Accept a Crow Messages bot invite. Adds the bot to your Messages so you can chat with it, and tells the bot you accepted so it authorizes you. Past... crow_accept_invite Accept an invite code from another Crow user. This establishes a peer connection and enables sharing. Shows a safety number for out-of-band verific... crow_accept_short_invite Accept a short pairing code someone read aloud or typed to you. Looks up the pairing rendezvous on the relay network and completes the connection. ... crow_actual_update_budget Set the budget amount for a category in a given month. Amount in cents. crow_add_contact Repair or add a Crow contact directly from their Crow ID and public keys — the recovery path when an invite handshake half-completed and messages a... crow_add_context_section Add a new custom section to crow.md. Custom sections extend Crow crow_add_member Add or update a member of a project space. Upsert: if the contact already has an active membership, the role/capabilities are updated. Requires man... + 182 more Every Crow tool, risk-classified, on the server page.

QUINTADB

174 All QuintaDB tools →
add_dashboard_item Додати віджет на дашборд порталу. Типи (module_type): 9=таблиця/звіт, 10=сума поля, 11=середнє поля, 12=кількість записів, 13=нові сьогодні, 14=оно... add_portal_menu_item Додати пункт меню порталу. Top-level: module_ai_id + module_id. Підменю-група: module_ai_id='submenu' + name (без module_id). Підпункт: parent_sect... add_record_comment Додати коментар до запису. add_user_to_portal_group Додати юзера до групи порталу за email. Якщо юзер не існує в порталі — буде створений. move_from_other_groups (default false) — перемістити з інших... add_user_to_team_group Додати користувача до групи команди за email. Якщо юзер не існує — буде створений. move_from_other_groups=true прибирає юзера з усіх інших груп і с... attach_media_to_record Прикріпити файл із бібліотеки MyFile до поля типу file або image конкретного запису. Використовуй для attached_files замість update_record, якщо по... bulk_update_records Масово оновити поле(я) у багатьох записах одразу. Замість 'постав статус Оброблено всім замовленням за сьогодні' через N викликів update_record. За... configure_chat Налаштувати кнопки зв'язку (chat widget) на порталі — WhatsApp, Telegram, email, телефон, Instagram тощо. Передай channels як об'єкт {whatsapp: '+3... create_action_rule Створити тригер/правило дій для форми. Спрацьовує on_create/on_update і виконує: send_email, send_sms, update_record, redirect, show_message. Можна... create_calendar Створити календар з джерелами даних (подіями з форм). date_title_type: 0=поле, 1=фіксований текст. info_window_type: 0=поле, 1=фіксований текст. create_chart Створити графік. type_code: line, bar, pie, doughnut, area, scatter. axis_l: mth (по місяцях), field (по полю), або числовий діапазон. data_sources... create_email_template Створити email-шаблон для розсилки з форми. Вставляй 'html_name' поля в body та subject БЕЗ жодних дужок (просто як текст, наприклад: Вітаємо, Full... + 162 more Every QuintaDB tool, risk-classified, on the server page.

SALESFORCE METADATA MCP

169 All Salesforce Metadata Mcp tools →
hello_world A sample tool that returns a greeting sf_activate_flexcard Activates an OmniStudio FlexCard so it is visible on Lightning pages and Experience Cloud sites. Reads the existing FlexCard definition and redepl... sf_activate_flow Activates a specific Flow version (or the latest version) via the Tooling API. Only one version of a flow can be active at a time — activating a ne... sf_activate_integration_procedure Activates an Integration Procedure so it can be invoked from OmniScripts, FlexCards, and APIs. Identified by procedureName + subType. sf_add_picklist_values Adds new picklist values to an existing Picklist or MultiselectPicklist field without removing existing values. Use when a user wants to add new op... sf_add_to_change_set Adds one or more metadata components to an existing Outbound Change Set by change set name. Supports all metadata types: CustomObject, CustomField,... sf_assign_layout_to_record_type Assigns an existing page layout to a specific record type on an object by updating the Profile metadata. Controls which page layout users see when ... sf_assign_presence_status Grants access to a Presence Status for the specified Profiles and/or Permission Sets. Agents can only select presence statuses that are assigned to... sf_assign_queue_member Adds a user to an existing Queue (GroupMember SObject) by username and queue DeveloperName. The queue must already exist (create via sf_create_queu... sf_assign_skill_to_agent Assigns a Skill to a Salesforce user (service agent) with a skill level rating. Creates a ServiceResource for the user if one does not already exis... sf_assign_territory_to_user Assigns a user to an Enterprise Territory Management territory via the UserTerritory2Association SObject. Users assigned to a territory get visibil... sf_bulk_import_records Bulk imports records using the Salesforce Bulk API 2.0. Supports insert, upsert, update, and delete operations on large datasets (thousands to mill... + 157 more Every Salesforce Metadata Mcp tool, risk-classified, on the server page.
add_beam EXPERIMENTAL — create an energy/laser beam (BeamEffect) from a position to a target point (default: 128u straight up) — additive, tintable. Returns... add_cave_waypoint Append (or insert at add_collider Add a specific collider component to a GameObject (no Rigidbody — use add_physics for a dynamic body). Can be configured as a trigger. Returns { ad... add_component_to_new_object Create a new GameObject, add a component, set its properties, and optionally parent/position/tag it — all in one atomic call. Collapses the create_... add_component_with_properties Add a component to a GameObject and configure its properties in one call (properties PERSIST through save+reload). Use list_available_components to... add_daynight_sun Generate a sun/sky driver component for the clock made by create_day_night_clock — a COMPANION, not a replacement: the clock owns TimeOfDay, this r... add_envmap_probe Add an environment reflection/ambient probe (EnvmapProbe) at a position with a cubic influence volume — captures local reflections and indirect lig... add_flicker_light Generate a light-flicker animator and optionally attach it to an existing light GameObject by GUID. Five presets: Candle (soft organic sway), Fluor... add_forest_poi Add a point of interest (clearing) to ForestGenerator.POIs. Returns add_forest_trail Add a trail gap between two POIs to ForestGenerator.Trails. Returns add_host_migration_recovery Generate a host-migration recovery component — it detects when THIS machine takes authority over its GameObject (the proxy→authority transition tha... add_interaction_prompt Generate an eye-traced interaction-prompt HUD — a PanelComponent (.razor + .razor.scss pair, like create_leaderboard_panel) that every frame traces... + 151 more Every Sbox tool, risk-classified, on the server page.

SPOTIFY

156 All Spotify tools →
me.library.update Add one or more items to the current user's library. Accepts Spotify URIs for tracks, albums, episodes, shows, audiobooks, users, and playlists. me.player.queue.create Add an item to be played next in the user's current playback queue. This API only works for users who have Spotify Premium. The order of execution ... me.player.repeat.update Set the repeat mode for the user's playback. This API only works for users who have Spotify Premium. The order of execution is not guaranteed when ... me.player.shuffle.update Toggle shuffle on or off for user’s playback. This API only works for users who have Spotify Premium. The order of execution is not guaranteed when... me.player.volume.update Set the volume for the user’s current playback device. This API only works for users who have Spotify Premium. The order of execution is not guaran... me.playlists.create Create a playlist for the current Spotify user. (The playlist will be empty until you [add tracks](/documentation/web-api/reference/add-tracks-to-p... playlists.items.create Add one or more items to a user's playlist. playlists.items.update Either reorder or replace items in a playlist depending on the request's parameters. To reorder items, include `range_start`, `insert_before`, `ran... playlists.update Change a playlist's name and public/private state. (The user must, of course, own the playlist.) spotify_absorb_playlist Merge unique tracks from a source playlist into a target playlist. Tracks already in target are skipped. Set dry_run=False to apply. spotify_build_queue Add multiple tracks (max 50) to the playback queue in order. Requires an active device. spotify_create_radio Create a radio-style playlist from a seed track or artist by sampling related artists' catalogs. + 144 more Every Spotify tool, risk-classified, on the server page.

Showing the 50 servers with the most write tools — 22132 servers in the catalogue expose them. Find the rest through tool search or the policy library.

FREQUENTLY ASKED QUESTIONS

Tools that create or modify resources. Medium risk -- rate limits recommended. There are 174368 write tools across 22132 MCP servers in the PolicyLayer reference.

Write tools should be rate-limited to prevent bulk unintended modifications. Argument validation catches malformed inputs.

GoHighLevel MCP Server, Mcp, Eda Agent, Huly, Mcp Server, and 22127 more.

Take your agents live. Without losing control.

Route your MCP traffic through PolicyLayer. Every tool call is checked against your policy before it runs: allow, deny, or require approval. Per-identity grants. Full audit log. Live in minutes.

Instant setup, no code required.

46,500+ MCP servers and 515,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.