// SCAN REPORT

Aapanel

282 tools. 131 can modify or destroy data without limits.

26 destructive tools with no built-in limits. Policy required.

Last updated: 26 Aug 2026

131 can modify or destroy data

151 read-only

282 tools total

Community server · catalogue entry checked 26/08/2026

How to control Aapanel ↓

TOOL MAP

What Aapanel exposes to your agents

Read (151) Write / Execute (105) Destructive / Financial (26)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Aapanel tools

Destructive · High harden_clear_temp_login Clearing all temporary login sessions is an irreversible bulk operation — once sessions are purged, any users/agents relying on those sessions are immediately and unrecoverably disconnected. Destructive · High system_clear_all_cache This tool performs irreversible data deletion across multiple system directories. Destructive · High system_clear_all_logs Clearing all website logs is an irreversible destructive action that permanently removes audit trails and operational records. Destructive · Medium system_clear_cache Clearing system cache is an irreversible operation that permanently removes cached data from memory.

131 of Aapanel's 282 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Aapanel

PolicyLayer is an MCP gateway — it sits between your AI agents and Aapanel, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "backup_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "alert_set_warning": {
    "limits": [
      {
        "counter": "alert_set_warning_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "abnormal_check_cpu": {
    "limits": [
      {
        "counter": "abnormal_check_cpu_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Aapanel — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON AAPANEL →

Instant setup, no code required.

FULL CATALOGUE

All 282 Aapanel tools

DESTRUCTIVE 26 tools

Destructive backup_delete Delete a backup. Destructive crontab_delete Delete a cron job. Destructive cve_set_vuln_ignore Ignore a specific vulnerability permanently. Destructive database_delete Delete a database. Destructive database_delete_backup Delete a database backup. Destructive docker_image_delete Delete a Docker image. Destructive file_delete Delete a file or directory on the server. Destructive firewall_delete_ip Remove an IP rule from the firewall. Destructive firewall_delete_port Close a port in the firewall. Destructive ftp_delete Delete an FTP user. Destructive harden_clear_temp_login Clear all temporary login sessions for security. Destructive plugin_uninstall Uninstall a software/plugin. Destructive project_delete Delete a project. Destructive site_delete Delete a website. Destructive site_delete_domain Remove a domain from a site. Destructive soft_uninstall Uninstall a software component. Destructive ssl_delete_cert Delete an SSL certificate from the panel. Destructive system_clear_all_cache Clear all system garbage: mail logs, temp files, install cache, wwwlogs. Destructive system_clear_all_logs Close/clear all website logs on the server. Destructive system_clear_cache Clear system cache to free up memory. Destructive system_clear_old_sessions Delete old panel sessions to free up resources. Destructive system_clear_panel_logs Clear aaPanel error logs. Destructive system_clear_site_logs Clear access/error logs for a specific site. Destructive tamper_remove_file_deny Remove tamper protection from a file/directory. Destructive task_remove Remove/cancel a background task. Destructive waf_delete_rule Delete a WAF rule by ID.

EXECUTE 28 tools

Execute abnormal_check_all Run all abnormal detection checks at once (MySQL, PHP, CPU, memory, disk). Execute crontab_start Execute a cron job immediately. Execute deployment_install Install a deployment package to a site. Execute docker_container_restart Restart a Docker container. Execute docker_container_start Start a Docker container. Execute docker_container_stop Stop a Docker container. Execute harden_disable_ssh_password Disable SSH password authentication (enforce key-only auth for hardening). Execute harden_set_ssh_key_auth Set up SSH key-based authentication for hardening. Execute network_scan_ports Scan ports on a target host from the aaPanel server. Execute panel_sync_time Sync server time with NTP. Execute panel_update Update aaPanel to the latest version. Execute plugin_install Install a software/plugin. Execute project_start Start a project. Execute project_stop Stop a project. Execute security_baseline_repair Repair a specific security baseline issue. Execute security_baseline_scan Run security baseline scan (SSH, system config, permissions audit). Execute site_start Start a website. Execute site_stop Stop a website. Execute soft_install Install a software component (nginx, apache, mysql, php, redis, etc.). Execute system_release_memory Release/flush system memory (RAM cleanup). Runs sync and memory release script. Execute system_restart_panel Restart the aaPanel service. Execute system_restart_server Restart the server. Use with caution! Execute system_service_admin Start, stop, or restart a service (nginx, apache, mysql, etc.). Execute terminal_execute_command terminal_execute_command Execute terminal_install_bridge terminal_install_bridge Execute virus_scan_safe_detect Run system-level safe detection (file integrity, suspicious files, permission audit). Execute virus_scan_site Start a virus/malware scan on a website (checks for web shells, malicious code, trojans). Execute virus_scan_web Run web vulnerability scanning on a site (uses panel/scanning module).

WRITE 77 tools

Write alert_set_warning Set system warning/alert thresholds (CPU%, memory%, disk%). Write antitheft_set_config antitheft_set_config Write apache_set_config Set Apache main configuration parameters for optimization. Write backup_create Create a backup. Write config_close_panel Close/disable the panel. Write config_save_panel_ssl Configure SSL for the panel itself. Write config_set_admin_path Change the panel admin access path (security URL suffix). Write config_set_api_token Regenerate API token and configure IP limits. Write config_set_basic_auth Configure HTTP basic authentication for the panel. Write config_set_debug Enable or disable panel debug mode. Write config_set_ip_whitelist Set IP whitelist for panel access. Write config_set_password Change the panel admin password. Write config_set_username Change the panel admin username. Write crontab_create crontab_create Write crontab_modify Modify an existing cron job. Write cve_set_ignore Ignore/dismiss a CVE vulnerability finding. Write database_backup Backup a database. Write database_create database_create Write database_set_access Set database access permissions. Write database_set_password Change database password. Write file_chmod Change file permissions and optionally owner. Write file_compress Compress a file or directory into an archive. Write file_copy Copy a file/directory. Write file_download Download a file from a URL to the server. Write file_mkdir Create a directory on the server. Write file_move Move or rename a file/directory. Write file_upload Upload a file (base64 encoded content) to the server. Write file_write Write content to a file on the server. Write firewall_add_ip Add an IP rule to the firewall. Write firewall_add_port Open a port in the firewall. Write firewall_set_panel_port Change the aaPanel access port. Write ftp_create Create a new FTP user. Write ftp_set_password Change FTP user password. Write ftp_set_status Enable or disable an FTP user. Write harden_set_admin_path Change the panel admin access URL path (security URL suffix for hardening). Write harden_set_basic_auth Enable HTTP basic auth for the panel (double authentication layer). Write harden_set_improvement Enable/disable panel improvement program (data sharing toggle). Write harden_set_ip_whitelist Set IP whitelist for panel access (restrict admin access to specific IPs). Write harden_set_panel_lock Enable/disable panel lock (prevent modifications from other sessions). Write harden_set_panel_password_expire Set panel password expiration policy for hardening. Write harden_set_password_safe Set password complexity requirements for panel accounts. Write harden_set_ssh_config harden_set_ssh_config Write harden_set_ssl_verify Enable/disable panel SSL certificate verification for hardening. Write harden_set_two_step_auth Enable/disable two-factor authentication (2FA/TOTP) for a panel user. Write nginx_set_config Set Nginx main configuration parameters for optimization. Write panel_auto_update Enable or check panel auto-update setting. Write php_set_config Set PHP configuration parameters for optimization. Write php_set_fpm_config Set PHP-FPM pool configuration for performance optimization. Write php_set_max_size Set PHP max upload size for a version. Write php_set_max_time Set PHP max execution time for a version. Write plugin_set_config Set plugin configuration. Write plugin_set_status Enable or disable a plugin. Write project_create project_create Write project_set_config Update project configuration. Write site_add_domain Add a domain to an existing site. Write site_backup Create a backup of a website. Write site_close_force_https Disable HTTP to HTTPS redirect for a site. Write site_close_traffic_limit Disable traffic/rate limiting for a site. Write site_create site_create Write site_force_https Force HTTP to HTTPS redirect for a site. Write site_set_password Set HTTP basic access password for a site. Write site_set_php_version Change PHP version for a site. Write site_set_proxy site_set_proxy Write site_set_redirect site_set_redirect Write site_set_ssl Deploy SSL certificate to a site. Write site_set_traffic_limit site_set_traffic_limit Write ssh_set_info Update SSH service configuration. Write ssl_apply_letsencrypt ssl_apply_letsencrypt Write ssl_renew Renew an SSL certificate for a site. Write ssl_save_cert Save/upload an SSL certificate to the panel. Write ssl_set_to_site Deploy a stored SSL certificate to a site. Write storage_restore_path_permissions Restore path permissions from backup. Write tamper_add_file_deny Add file tamper protection (lock a file/directory from modification). Write tamper_fix_permissions Fix file/directory permissions to prevent unauthorized tampering. Write tamper_set_dir_protection Enable or disable directory protection for a site (toggle .user.ini cross-site protection). Write waf_add_rule Add a WAF rule (block URL, IP, User-Agent, etc.). Write waf_set_site_status Enable or disable WAF protection for a specific site.

READ 151 tools

Read abnormal_check_cpu Check overall CPU for abnormal usage patterns. Read abnormal_check_disk Check disk usage for abnormalities. Read abnormal_check_memory Check memory usage for abnormalities. Read abnormal_check_mysql_cpu Check MySQL CPU usage for abnormalities. Read abnormal_check_mysql_server Check MySQL server for abnormal configuration issues. Read abnormal_check_php_cpu Check PHP-FPM CPU usage for abnormalities. Read abnormal_check_php_server Check PHP-FPM for abnormal configuration. Read alert_get_warning Get system warning/alert configuration (CPU, memory, disk thresholds). Read antitheft_get_config Get anti-theft/hotlink protection configuration for a site. Read apache_get_config Get Apache main configuration parameters. Read backup_list List all backups. Read config_get_api_config Get API interface configuration. Read config_get_login_log Get panel login logs. Read config_get_panel_ssl Get panel SSL configuration status. Read config_get_settings Get panel configuration settings. Read config_get_users List panel users. Read cpu_get_high_cpu_processes Get list of processes with high CPU usage. Read cpu_get_info Get detailed CPU information including model, cores, usage percentage. Read cpu_get_io_stats Get CPU I/O statistics for a time range. Read cpu_get_load_average Get system load average (1min, 5min, 15min). Read cpu_get_process_tops Get top processes by resource consumption (CPU/memory ranking). Read crontab_get_backup_list Get backup list for a cron job. Read crontab_get_logs Get execution logs for a cron job. Read crontab_list List all cron jobs. Read cve_check_cve Check a specific CVE by ID against installed software. Read cve_check_find Check/verify a specific CVE vulnerability finding. Read cve_get_kill_list Get list of killed/fixed vulnerabilities. Read cve_get_scan_progress Get CVE scan progress bar/status. Read cve_get_tmp_result Get temporary/intermediate CVE scan results. Read cve_scan_list Get CVE vulnerability scan results (risk items, security issues, ignored items). Read database_get_backups List database backups. Read database_get_error_log Get MySQL error log. Read database_get_info Get database details. Read database_get_mysql_status Get MySQL server status. Read database_get_slow_log Get MySQL slow query log. Read database_list List all databases on the panel. Read deployment_get_list List available deployment packages. Read deployment_get_speed Get deployment progress for an ongoing installation. Read docker_container_info Get detailed information about a Docker container. Read docker_container_list List all Docker containers. Read docker_get_logs Get Docker container logs. Read docker_image_list List all Docker images. Read docker_network_list List all Docker networks. Read docker_volume_list List all Docker volumes. Read file_get_dir_size Get total size of a directory. Read file_list List directory contents on the server. Read file_read Read file content from the server. Read file_search Search for files in a directory. Read file_stat Get file/directory info (size, permissions, owner, modified time). Read file_unzip Extract an archive file. Read firewall_get_list List firewall rules (ports and IP rules). Read firewall_get_panel_port Get the current aaPanel access port. Read firewall_get_status Get firewall status (enabled/disabled, type). Read ftp_list List all FTP users. Read harden_get_security_config Get current panel security configuration overview (SSL, 2FA, basic auth, IP whitelist, password policy). Read harden_get_ssh_config Get SSH security configuration for hardening audit (port, password auth, root login, key auth). Read logs_get_apache_log Read Apache log file. Read logs_get_error_logs Get error logs for a site. Read logs_get_nginx_log Read Nginx log file. Read logs_get_panel_log_file Read the aaPanel system log file. Read logs_get_panel_logs Get panel operation logs. Read logs_get_redis_log Read Redis log file. Read logs_get_security_logs Get security logs. Read logs_get_site_logs Get access logs for a site. Read memory_get_info Get detailed memory information (total, used, free, swap, cache). Read memory_get_io_info Get disk I/O read/write speed information. Read memory_get_system_total Get complete system overview (memory, CPU, disk, network, version combined). Read monitor_get_history Get historical monitoring data for a time range. Read monitor_get_nginx_status Get Nginx status information. Read monitor_get_php_status Get PHP status information. Read monitor_get_process_list Get list of running processes. Read monitor_get_realtime Get real-time system monitoring data (CPU, memory, network, disk I/O). Read network_get_interfaces Get network interface information (IPs, MAC, gateway, DNS). Read network_get_io_stats Get network I/O statistics for a time range. Read network_get_list Get network connection list and statistics. Read network_get_traffic_stats Get network traffic statistics over a time range. Read network_scan_connections Get all active network connections (TCP/UDP, states, ports, processes). Read network_scan_firewall_rules List all firewall rules (ports + IP rules) for network audit. Read nginx_get_config Get Nginx main configuration parameters. Read panel_check_installed Check if essential components are installed. Read panel_get_installed_software Get list of all installed software/components. Read panel_get_soft_list Get full software store list (all available software). Read php_get_config Get PHP configuration for a specific version. Read php_get_fpm_config Get PHP-FPM pool configuration (process management, children limits). Read plugin_get_config Get plugin configuration. Read plugin_get_info Get information about a specific software/plugin. Read plugin_get_installed_list List all installed plugins. Read plugin_list List installed software/plugins. Read process_kill Kill a specific process by PID. Read process_list List all running processes with CPU and memory usage. Read project_get_config Get project configuration. Read project_get_status Get project running status. Read project_list project_list Read security_baseline_get_api_log Get security baseline API audit logs. Read security_baseline_get_result Get security baseline scan results. Read security_baseline_get_ssh_errors Get SSH error login attempts (brute-force detection). Read security_baseline_repair_all Repair all security baseline issues at once. Read security_get_operation_logs Get panel operation logs (all actions performed through the panel). Read service_get_apache_status Get Apache server status and load information. Read service_get_memcached_status Get Memcached server status and statistics. Read service_get_nginx_status Get Nginx load status (connections, requests, workers). Read service_get_php_status Get PHP-FPM load status for a specific version. Read service_get_redis_status Get Redis server status and statistics. Read site_get_backup_list List website backups. Read site_get_config Get site configuration. Read site_get_domains List all domains bound to a site. Read site_get_logs Get site access and error logs. Read site_get_ssl Get SSL certificate status for a site. Read site_get_traffic_limit Get traffic/rate limiting configuration for a site. Read site_get_traffic_stats Get traffic statistics for a site. Read site_list List all websites on the panel. Read site_stats_all Get comprehensive statistics overview: QPS, hourly requests, spider crawls, exceptions, load & flow — all in o Read site_stats_exceptions Get site exception statistics (MySQL slow queries, PHP slow logs, attacks, CC attacks, HTTP status code distri Read site_stats_load_and_flow Get system load average and upstream traffic flow. Read site_stats_logs Get site access and error log summary. Read site_stats_request_count_qps Get real-time request count and QPS (queries per second) across all sites. Read site_stats_requests_by_hour Get hourly request count breakdown per site. Read site_stats_spider_crawl Get search engine spider/bot crawl statistics per site. Read site_stats_traffic Get full traffic statistics for a site (requests, bandwidth, visitors). Read ssh_get_info Get SSH service configuration information. Read ssh_get_logs Get SSH login logs. Read ssh_get_security_status Get SSH security audit status. Read ssl_get_cert Get SSL certificate details by ID. Read ssl_get_list List all SSL certificates on the panel. Read ssl_get_site_ssl Get SSL certificate status for a specific site. Read storage_fix_permissions Fix file/directory permissions for a path (restore to correct ownership/permissions). Read storage_get_dir_size Get total size of a directory on the server. Read storage_get_disk_info Get detailed disk/partition information including usage and mount points. Read storage_get_disk_io Get disk I/O statistics for a time range. Read storage_get_path_permissions Get current permissions for a path. Read storage_get_path_size Get detailed size breakdown of a path (recursive). Read system_get_all_info Get all system information at once (comprehensive overview). Read system_get_boot_time Get system boot time. Read system_get_cpu_info Get CPU information including model, cores, and usage. Read system_get_disk_info Get disk information including partitions and usage. Read system_get_mem_info Get memory information including total, used, and free memory. Read system_get_network_info Get network interface information. Read system_get_status Get comprehensive system status including CPU, memory, disk, network, and load. Read system_get_system_version Get operating system version information. Read tamper_get_dir_protection Get directory protection status for a site (checks .user.ini and access controls). Read tamper_get_file_deny Get list of tamper-protected files (file deny rules that prevent modification). Read task_get_info Get background task details. Read task_list List background tasks. Read terminal_bridge_status terminal_bridge_status Read terminal_list_servers terminal_list_servers Read virus_scan_get_result Get virus/malware scan results for a site. Read virus_scan_get_web_result Get web vulnerability scan results. Read waf_get_logs Get WAF attack/interception logs. Read waf_get_rules Get WAF rule list (URL, IP, UA, CC rules). Read waf_get_sites Get list of sites protected by WAF. Read waf_get_status Get WAF (btwaf) plugin status — installed, running, license state.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Aapanel

Can an AI agent delete data through the Aapanel MCP server? +

Yes. The Aapanel server exposes 26 destructive tools including backup_delete, crontab_delete, cve_set_vuln_ignore. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Aapanel? +

The Aapanel server has 77 write tools including alert_set_warning, antitheft_set_config, apache_set_config. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Aapanel.

How many tools does the Aapanel MCP server expose? +

282 tools across 4 categories: Destructive, Execute, Read, Write. 151 are read-only. 131 can modify, create, or delete data.

How do I enforce a policy on Aapanel? +

Register the Aapanel MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.