Skip to content

Scalix Cloud

by scalix.world · remote · no sign-in to list tools · v1.5.0 · published by world.scalix

The agent-native cloud: database, functions, AI, storage, computers. 51 tools, one API key.

Deletes · 13Final · 1Changes · 20
CompareRegistry entry

53 tools: 13 can delete or cancel things, 1 do something that can't be undone, 20 change things and 19 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cloud https://api.scalix.world/v1/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnscalix_db_optimize

    The server marks "scalix_db_optimize" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "analyze": a word for reading.

    What this check looks for
  • Warnscalix_db_query

    The server marks "scalix_db_query" destructive (destructiveHint: true), and its name says "query", a word for reading.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false}; The name "scalix_db_query" says "query": a word for reading.

    What this check looks for
  • Warnscalix_run_list

    The server marks "scalix_run_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "scalix_run_list" says "run": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

53 tools

Deletes or cancels 13Claude Code: deny
  • scalix_auth_configureConfigure end-user authentication for the project — require MFA, require email confirmation, and set the allowed auth providers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Configure end-user authentication for the project — require MFA, require email confirmation, and set the allowed auth providers. Needs an admin API key: organization admin scope is never delegated to a connected app, so this tool fails on an OAuth connection.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_computer_deletePermanently delete a persistent Linux machine AND its disk.No findings

    Why it is in this group

    • The name "scalix_computer_delete" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete a persistent Linux machine AND its disk. This cannot be undone — use scalix_computer_stop if you may want the files back.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_computer_execRun a command inside a persistent Linux machine and wait for it to finish.No findings

    Why it is in this group

    • The name "scalix_computer_exec" says "exec": a word for a change.
    • The input takes a statement or command to run (input.command), which can change anything it can reach.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Run a command inside a persistent Linux machine and wait for it to finish. Returns exit code, stdout and stderr. The machine must be running.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_computer_set_ssh_keysReplace the ssh keys authorised for root on a persistent Linux machine.No findings

    Why it is in this group

    • The name "scalix_computer_set_ssh_keys" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Replace the ssh keys authorised for root on a persistent Linux machine. This is how you revoke: send the list without the key you want gone, and on a running machine it stops working immediately. Sending an empty list removes every key. Not a patch — whatever you send becomes the whole list, so read the current keys from scalix_computer_list first if you mean to add one.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_computer_write_fileWrite a text file into a persistent Linux machine.No findings

    Why it is in this group

    • The name "scalix_computer_write_file" says "write": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Write a text file into a persistent Linux machine. Use this instead of shelling out with cat/echo — no quoting to get wrong.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_db_migrateApply a database migration by version number.No findings

    Why it is in this group

    • The description's first verb is "apply": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Apply a database migration by version number.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_db_queryExecute a SQL query against the project database.1 finding

    Why it is in this group

    • The name "scalix_db_query" says "query": a word for reading.
    • The description's first verb is "execute": a word for a change.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Warn

      The server marks "scalix_db_query" destructive (destructiveHint: true), and its name says "query", a word for reading.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false}; The name "scalix_db_query" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Execute a SQL query against the project database. Returns columns, rows, row count, and cost breakdown. Destructive statements (DROP/TRUNCATE/bulk DELETE) require a two-step confirmation: the first call returns code CONFIRMATION_REQUIRED with a confirmation_token — re-call with that value in confirm_token to execute.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_fn_invokeInvoke a deployed function with a JSON payload.No findings

    Why it is in this group

    • The name "scalix_fn_invoke" says "invoke": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Invoke a deployed function with a JSON payload.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_kv_setSet a key-value pair with optional TTL.No findings

    Why it is in this group

    • The name "scalix_kv_set" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Set a key-value pair with optional TTL.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_run_deletePermanently delete a Scalix Run service.No findings

    Why it is in this group

    • The name "scalix_run_delete" says "run": a word for a change.
    • The description's first verb is "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete a Scalix Run service. This cannot be undone: it stops the running instances, releases the public HTTPS URL, erases any attached volumes and discards every revision, so scalix_run_rollback cannot bring it back afterwards. To stop paying for an idle service without losing it, set min_instances to 0 with scalix_run_scale instead.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_storage_delete_bucketPermanently delete a storage bucket and every object in it.No findings

    Why it is in this group

    • The name "scalix_storage_delete_bucket" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete a storage bucket and every object in it. Irreversible.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_storage_delete_objectPermanently delete an object (key) from a storage bucket.No findings

    Why it is in this group

    • The name "scalix_storage_delete_object" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete an object (key) from a storage bucket. Irreversible.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_storage_uploadUpload content to object storage.No findings

    Why it is in this group

    • The name "scalix_storage_upload" says "upload": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Upload content to object storage. Provide the content as a base64-encoded string.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
Can't be undone 1Claude Code: ask
  • scalix_events_publishPublish an event to a topic.No findings

    Why it is in this group

    • The name "scalix_events_publish" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish an event to a topic. Provide an event_type (a short name for the kind of event, e.g. 'user.created') and the data payload.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
Changes things 20Claude Code: ask
  • scalix_ai_inferRun AI inference on Scalix AI.No findings

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    Description, as the server wrote it
    Run AI inference on Scalix AI. Sends a prompt and returns the model's response in the OpenAI-compatible chat-completions format; tokens are billed to the project's credit pool. Discover available model IDs with scalix_ai_models.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_build_createCreate a new container image build from a Git repository or Dockerfile.No findings

    Why it is in this group

    • The name "scalix_build_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new container image build from a Git repository or Dockerfile.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_computer_createGet or create a persistent Linux machine by name.No findings

    Why it is in this group

    • The name "scalix_computer_create" says "create": a word for a change.
    Description, as the server wrote it
    Get or create a persistent Linux machine by name. Idempotent — calling it again with the same name returns the existing machine rather than creating another, so it is safe to retry. Unlike a sandbox, the disk survives stop/start and is only erased by scalix_computer_delete.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_computer_startStart a stopped persistent Linux machine.No findings

    Why it is in this group

    • The name "scalix_computer_start" says "start": a word for a change.
    Description, as the server wrote it
    Start a stopped persistent Linux machine. Same disk, same address.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_computer_stopStop a persistent Linux machine.No findings

    Why it is in this group

    • The name "scalix_computer_stop" says "stop": a word for a change.
    Description, as the server wrote it
    Stop a persistent Linux machine. The disk and the network address are kept, so starting it again returns the same files at the same address. Stop machines you are done with — a stopped machine costs only its disk.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_crew_board_postPost a note to the crew's notice board for other members and the human to see.No findings

    Why it is in this group

    • The name "scalix_crew_board_post" says "post": a word for a change.
    Description, as the server wrote it
    Post a note to the crew's notice board for other members and the human to see. The board is news, not knowledge: set ttl_seconds so routine updates expire on their own, pin only what every future task must see, and set owner_member_id to hand work off to a specific member. Notes cannot be edited from here — post a correction instead.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_cron_createCreate a cron schedule to run a function or webhook on a timer.No findings

    Why it is in this group

    • The name "scalix_cron_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a cron schedule to run a function or webhook on a timer.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_db_optimizeAnalyze a SQL query and return optimization suggestions including index recommendations and query rewrites.1 finding

    Why it is in this group

    • The description's first verb is "analyze": a word for reading.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "scalix_db_optimize" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "analyze": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Analyze a SQL query and return optimization suggestions including index recommendations and query rewrites.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_text_to_sqlTranslate a plain-language question into a candidate SQL query using pattern-matching against the live schema (no AI model — simple questions only: counts, averages, filtered selec…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Translate a plain-language question into a candidate SQL query using pattern-matching against the live schema (no AI model — simple questions only: counts, averages, filtered selects on a named table). Returns the SQL without executing it, with a confidence score; low confidence means the table was guessed. Review the statement and tables_used, then run it with scalix_db_query. For complex questions, read scalix_db_schema and write the SQL directly.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_domain_addAdd a custom domain to the project.No findings

    Why it is in this group

    • The name "scalix_domain_add" says "add": a word for a change.
    Description, as the server wrote it
    Add a custom domain to the project. Returns DNS records to configure.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_domain_verifyVerify DNS configuration for a custom domain and provision SSL certificate.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify DNS configuration for a custom domain and provision SSL certificate.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_fn_deployDeploy a Scalix Function — serverless, per-request billed, running in isolated microVMs — from a container image.No findings

    Why it is in this group

    • The name "scalix_fn_deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Deploy a Scalix Function — serverless, per-request billed, running in isolated microVMs — from a container image. Invoke it with scalix_fn_invoke once deployed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_project_createCreate a new project within an organization.No findings

    Why it is in this group

    • The name "scalix_project_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new project within an organization. Returns the project ID, name, and slug. Issue an API key for the new project separately. Needs an admin API key: organization admin scope is never delegated to a connected app, so this tool fails on an OAuth connection.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_run_deployDeploy a long-running container service on Scalix Run from a container image.No findings

    Why it is in this group

    • The name "scalix_run_deploy" says "run": a word for a change.
    Description, as the server wrote it
    Deploy a long-running container service on Scalix Run from a container image. Creates a new service, or a new revision of an existing service with the same name, with health checks, a public HTTPS URL, and autoscaling between min_instances and max_instances (min 0 = scale-to-zero when idle). Billed per vCPU-hour while instances run. Roll back a bad revision with scalix_run_rollback.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_run_listList all deployed container services in the project.1 finding

    Why it is in this group

    • The name "scalix_run_list" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "scalix_run_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "scalix_run_list" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    List all deployed container services in the project.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_run_rollbackRoll a Scalix Run service back to an earlier revision — omit 'revision' to return to the immediately previous one.No findings

    Why it is in this group

    • The name "scalix_run_rollback" says "run": a word for a change.
    Description, as the server wrote it
    Roll a Scalix Run service back to an earlier revision — omit 'revision' to return to the immediately previous one. Traffic switches to the target revision; the replaced revision is kept and can be redeployed later. Use scalix_run_list to see services and their current revisions.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_run_scaleChange the autoscaling bounds of an existing Scalix Run service without redeploying it.No findings

    Why it is in this group

    • The name "scalix_run_scale" says "run": a word for a change.
    Description, as the server wrote it
    Change the autoscaling bounds of an existing Scalix Run service without redeploying it. Raising min_instances keeps instances warm (no cold starts, higher cost); min_instances 0 enables scale-to-zero when idle. Takes effect immediately. Find service IDs with scalix_run_list.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
  • scalix_sandbox_runExecute code in an isolated sandbox.No findings

    Why it is in this group

    • The name "scalix_sandbox_run" says "run": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Execute code in an isolated sandbox. Supports Python, JavaScript, TypeScript, and Bash. Returns stdout/stderr, the probed interpreter version, and any files the code wrote (base64, under size/count caps).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_storage_create_bucketCreate a new Scalix Storage bucket in the project (S3-compatible object storage).No findings

    Why it is in this group

    • The name "scalix_storage_create_bucket" says "create": a word for a change.
    Description, as the server wrote it
    Create a new Scalix Storage bucket in the project (S3-compatible object storage). Bucket names must be unique within the project. Setting public=true makes every object in the bucket readable without authentication — leave it false (the default) and use presigned URLs for private sharing. Public buckets double as static websites: upload index.html and serve it from the project's store subdomain at https://{slug}.store.scalix.world/buckets/{bucket}/objects/ (directory requests serve index.html; a 404.html object is served as the error page).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
  • scalix_storage_downloadDownload an object from storage.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download an object from storage. Returns the content as base64.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
Only reads 19Claude Code: allow
  • scalix_ai_modelsList the AI models available to the project — virtual tiers and the pass-through catalog model IDs — for use in scalix_ai_infer.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the AI models available to the project — virtual tiers and the pass-through catalog model IDs — for use in scalix_ai_infer.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_build_statusGet the status and logs of a build.No findings

    Why it is in this group

    • The name "scalix_build_status" says "status": a word for reading.
    Description, as the server wrote it
    Get the status and logs of a build.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_computer_listList your persistent Linux machines with their status, address and resource shape.No findings

    Why it is in this group

    • The name "scalix_computer_list" says "list": a word for reading.
    Description, as the server wrote it
    List your persistent Linux machines with their status, address and resource shape.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_computer_read_fileRead a text file out of a persistent Linux machine.No findings

    Why it is in this group

    • The name "scalix_computer_read_file" says "read": a word for reading.
    Description, as the server wrote it
    Read a text file out of a persistent Linux machine.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_crew_board_readRead a crew's notice board: every pinned note plus the newest unpinned ones, current as of this call.No findings

    Why it is in this group

    • The name "scalix_crew_board_read" says "read": a word for reading.
    Description, as the server wrote it
    Read a crew's notice board: every pinned note plus the newest unpinned ones, current as of this call. The board is the crew's shared coordination state — read it before starting work so you act on the latest news, and post what teammates need to know with scalix_crew_board_post.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_crew_listList your crews with their ids and names.No findings

    Why it is in this group

    • The name "scalix_crew_list" says "list": a word for reading.
    Description, as the server wrote it
    List your crews with their ids and names. A crew is a team of AI members that share a notice board; use the crew id with the board tools.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_piiList all columns classified as containing personally identifiable information (PII).No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List all columns classified as containing personally identifiable information (PII).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_relationshipsGet the relationship map showing how tables are connected via foreign keys.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the relationship map showing how tables are connected via foreign keys.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_schemaGet the full database schema including all tables, columns, types, and relationships.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the full database schema including all tables, columns, types, and relationships.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_search_columnsSearch for columns by name or type across all tables.No findings

    Why it is in this group

    • The name "scalix_db_search_columns" says "search": a word for reading.
    Description, as the server wrote it
    Search for columns by name or type across all tables.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_db_tableGet detailed information about a specific database table including columns, indexes, and foreign keys.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get detailed information about a specific database table including columns, indexes, and foreign keys.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_domain_listList all custom domains and their SSL/verification status.No findings

    Why it is in this group

    • The name "scalix_domain_list" says "list": a word for reading.
    Description, as the server wrote it
    List all custom domains and their SSL/verification status.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_events_topicsList the event-bus topics in the project, with each topic's ID and name.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the event-bus topics in the project, with each topic's ID and name. Use this to find or verify a topic_id before publishing with scalix_events_publish; publishing to a non-existent topic fails.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_fn_listList all deployed serverless functions.No findings

    Why it is in this group

    • The name "scalix_fn_list" says "list": a word for reading.
    Description, as the server wrote it
    List all deployed serverless functions.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_kv_getRead a single value from the project's key-value store by exact key.No findings

    Why it is in this group

    • The name "scalix_kv_get" says "get": a word for reading.
    Description, as the server wrote it
    Read a single value from the project's key-value store by exact key. Returns the stored value, or a not-found error if the key does not exist or its TTL has expired. Use scalix_kv_list to discover keys by prefix first.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_kv_listList keys in the key-value store, optionally filtered by prefix.No findings

    Why it is in this group

    • The name "scalix_kv_list" says "list": a word for reading.
    Description, as the server wrote it
    List keys in the key-value store, optionally filtered by prefix.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_project_listList every project in an organization, with each project's ID, name, and slug.No findings

    Why it is in this group

    • The name "scalix_project_list" says "list": a word for reading.
    Description, as the server wrote it
    List every project in an organization, with each project's ID, name, and slug. Use this to resolve a project ID before calling project-scoped tools. Needs an admin API key: organization admin scope is never delegated to a connected app, so this tool fails on an OAuth connection.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_statusGet the current health status of the Scalix Cloud platform including all service components.No findings

    Why it is in this group

    • The name "scalix_status" says "status": a word for reading.
    Description, as the server wrote it
    Get the current health status of the Scalix Cloud platform including all service components.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • scalix_storage_listList storage buckets, or list objects in a specific bucket with optional prefix filter.No findings

    Why it is in this group

    • The name "scalix_storage_list" says "list": a word for reading.
    Description, as the server wrote it
    List storage buckets, or list objects in a specific bucket with optional prefix filter.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cloud https://api.scalix.world/v1/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cloud__scalix_db_relationships",
      "mcp__cloud__scalix_db_search_columns",
      "mcp__cloud__scalix_db_pii",
      "mcp__cloud__scalix_db_schema",
      "mcp__cloud__scalix_db_table",
      "mcp__cloud__scalix_storage_list",
      "mcp__cloud__scalix_fn_list",
      "mcp__cloud__scalix_kv_get",
      "mcp__cloud__scalix_kv_list",
      "mcp__cloud__scalix_ai_models",
      "mcp__cloud__scalix_events_topics",
      "mcp__cloud__scalix_computer_list",
      "mcp__cloud__scalix_computer_read_file",
      "mcp__cloud__scalix_crew_list",
      "mcp__cloud__scalix_crew_board_read",
      "mcp__cloud__scalix_domain_list",
      "mcp__cloud__scalix_build_status",
      "mcp__cloud__scalix_project_list",
      "mcp__cloud__scalix_status"
    ],
    "ask": [
      "mcp__cloud__scalix_db_optimize",
      "mcp__cloud__scalix_db_text_to_sql",
      "mcp__cloud__scalix_storage_download",
      "mcp__cloud__scalix_storage_create_bucket",
      "mcp__cloud__scalix_fn_deploy",
      "mcp__cloud__scalix_ai_infer",
      "mcp__cloud__scalix_events_publish",
      "mcp__cloud__scalix_cron_create",
      "mcp__cloud__scalix_sandbox_run",
      "mcp__cloud__scalix_computer_create",
      "mcp__cloud__scalix_computer_stop",
      "mcp__cloud__scalix_computer_start",
      "mcp__cloud__scalix_crew_board_post",
      "mcp__cloud__scalix_domain_add",
      "mcp__cloud__scalix_domain_verify",
      "mcp__cloud__scalix_build_create",
      "mcp__cloud__scalix_project_create",
      "mcp__cloud__scalix_run_deploy",
      "mcp__cloud__scalix_run_list",
      "mcp__cloud__scalix_run_scale",
      "mcp__cloud__scalix_run_rollback"
    ],
    "deny": [
      "mcp__cloud__scalix_db_query",
      "mcp__cloud__scalix_db_migrate",
      "mcp__cloud__scalix_storage_upload",
      "mcp__cloud__scalix_storage_delete_object",
      "mcp__cloud__scalix_storage_delete_bucket",
      "mcp__cloud__scalix_fn_invoke",
      "mcp__cloud__scalix_kv_set",
      "mcp__cloud__scalix_computer_set_ssh_keys",
      "mcp__cloud__scalix_computer_exec",
      "mcp__cloud__scalix_computer_write_file",
      "mcp__cloud__scalix_computer_delete",
      "mcp__cloud__scalix_auth_configure",
      "mcp__cloud__scalix_run_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cloud. Review it before you use it.