// SCAN REPORT

Alibabacloud Devops

202 tools. 86 can modify or destroy data without limits.

12 destructive tools with no built-in limits. Policy required.

Last updated:

86 can modify or destroy data
116 read-only
202 tools total

Community server · catalogue entry checked 27/06/2026

How to control Alibabacloud Devops ↓

TOOL MAP

What Alibabacloud Devops exposes to your agents

Read (116) Write / Execute (74) Destructive / Financial (12)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Alibabacloud Devops tools

Destructive · High cancel_app_release_stage_execution Cancelling an in-progress release stage execution is an irreversible action: the running execution is terminated and cannot be resumed. Destructive · High cancel_appstack_change_request Cancelling a change request stops an active process and cannot be undone; the change request would need to be recreated and re-approved. Destructive · High delete_app_orchestration The tool permanently removes application orchestration data without undo capability. Destructive · High delete_branch Deleting a branch is a destructive action that removes code history and cannot be undone without administrative intervention or backups.

86 of Alibabacloud Devops's 202 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Alibabacloud Devops

PolicyLayer is an MCP gateway — it sits between your AI agents and Alibabacloud Devops, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "cancel_app_release_stage_execution": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_host_list_to_deploy_group": {
    "limits": [
      {
        "counter": "add_host_list_to_deploy_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "compare": {
    "limits": [
      {
        "counter": "compare_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Alibabacloud Devops — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON ALIBABACLOUD DEVOPS →

Instant setup, no code required.

FULL CATALOGUE

All 202 Alibabacloud Devops tools

DESTRUCTIVE 12 tools
Destructive cancel_app_release_stage_execution [application delivery] 取消发布流程阶段执行 Destructive cancel_appstack_change_request [application delivery] Cancel a change request Destructive delete_app_orchestration [application delivery] Delete an application orchestration Destructive delete_branch [Code Management] Delete a branch from a Codeup repository Destructive delete_file [Code Management] Delete a file from a Codeup repository Destructive delete_flow_variable_group [Pipeline Management] Delete a Flow (pipeline) variable group by numeric id. Destructive delete_resource_member [Resource Member Management] Delete a resource member Destructive delete_tag [Tag Management] Delete a tag Destructive delete_tag_group [Tag Management] Delete a tag group Destructive delete_testcase [test management] 删除测试用例 Destructive delete_variable_group [application delivery] Delete a variable group Destructive delete_version [Project Management] Delete a version from a Yunxiao Project.\n\nUse Cases:\n\nRemove obsolete versions\nClean
EXECUTE 19 tools
Execute execute_app_release_stage [application delivery] 执行变更请求的发布流程阶段 Execute execute_job_action [application delivery] 操作环境部署单 Execute execute_pipeline_job_action [Pipeline Management] Execute a subsequent action of a pipeline job. Execute execute_pipeline_job_run [Pipeline Management] Manually run a pipeline task. Start a specific job in a pipeline run instance. Execute execute_system_release_stage [application delivery] 执行系统发布流程阶段 Execute pass_app_release_stage_validate [application delivery] 通过发布流程阶段验证 Execute pass_pipeline_validate [Pipeline Management] Approve/pass a manual checkpoint (human validation gate) in a pipeline run. Execute refuse_app_release_stage_validate [application delivery] 拒绝发布流程阶段验证 Execute refuse_pipeline_validate [Pipeline Management] Refuse/reject a manual checkpoint (human validation gate) in a pipeline run. Execute rerun_pipeline_job_run [Pipeline Management] Rerun a pipeline job. Only deploy-type jobs are supported. You can set a job as deploy t Execute resume_vm_deploy_order [VM Deploy Order Management] Resume VM deploy order Execute retry_app_release_stage_pipeline [application delivery] 重试变更请求的发布流程阶段流水线 Execute retry_pipeline_job_run [Pipeline Management] Retry a failed pipeline job run. Execute retry_vm_deploy_machine [VM Deploy Order Management] Retry VM deploy machine Execute skip_app_release_stage_pipeline [application delivery] 跳过变更请求的发布流程阶段流水线 Execute skip_pipeline_job_run [Pipeline Management] Skip a pipeline job run. Execute skip_vm_deploy_machine [VM Deploy Order Management] Skip VM deploy machine Execute stop_pipeline_job_run [Pipeline Management] Stop/terminate a running pipeline job. Execute stop_vm_deploy_order [VM Deploy Order Management] Stop VM deploy order
WRITE 55 tools
Write add_host_list_to_deploy_group [application delivery] Add host list to deploy group Write add_host_list_to_host_group [application delivery] Add host list to host group Write close_appstack_change_request [application delivery] Close a change request Write create_app_orchestration [application delivery] Create an application orchestration Write create_app_tag [application delivery] Create an application tag Write create_application [application delivery] Create a new application Write create_appstack_change_request [application delivery] Create a change request Write create_branch [Code Management] Create a new branch in a Codeup repository Write create_change_order [application delivery] 创建部署单 Write create_change_request [Code Management] Create a new change request (merge request). Supports specifying source/target branches, rev Write create_change_request_comment [Code Management] Create a comment on a change request. Supports two types: GLOBAL_COMMENT (global comment on Write create_commit_comment [Code Management] Create a comment on a commit Write create_effort_record [Project Management] 登记实际工时。云效中实际工时（fieldId 101587）为受控字段，不能通过 update_work_item 的 customFieldValues 修改，必须调用本工具。 Write create_estimated_effort [Project Management] 登记预计工时。云效中预计工时（fieldId 101586）为受控字段，不能通过 update_work_item 的 customFieldValues 修改，必须调用本工具。 Write create_file [Code Management] Create a new file in a Codeup repository Write create_flow_variable_group [Pipeline Management] Create an organization-level variable group for Flow (pipeline). Write create_global_var [application delivery] Create a global variable group Write create_pipeline_from_description [Pipeline Management] Create a pipeline using structured parameters extracted from user descriptions and envir Write create_repository [Code Management] Create a new Codeup repository.\n Write create_resource_member [Resource Member Management] Create a resource member Write create_sprint [Project Management] Create a new sprint Write create_system_release_workflow [application delivery] 创建系统发布流程 Write create_tag [Tag Management] Create a tag Write create_tag_group [Tag Management] Create a tag group Write create_testcase [test management] 创建测试用例 Write create_testcase_comment [test management] 创建测试用例评论，支持回复（通过parentId） Write create_testcase_directory [test management] 创建测试用例目录 Write create_variable_group [application delivery] Create a variable group Write create_version [Project Management] Create a new version in a Yunxiao Project. Versions are used to manage release plans and Write create_work_item [Project Management] Create a work item. \n描述字段使用提示：\n- description 支持 Markdown / 富文本，需配合 formatType（\ Write create_work_item_comment [Project Management] Create a comment for a specific work item Write create_workitem_attachment [Project Management] Upload a local file as an attachment to a work item via multipart/form-data. MCP Server r Write generate_pipeline_yaml [Pipeline Management] Generate only the YAML configuration for a pipeline without creating it.\n\n Write update_app_orchestration [application delivery] Update an application orchestration. This is a full replacement — include all existing Write update_app_release_stage [application delivery] 更新应用发布流程阶段 Write update_app_tag [application delivery] Update an application tag Write update_app_tag_bind [application delivery] Update application tag bindings Write update_application [application delivery] Update an existing application Write update_change_request_comment [Code Management] Update a comment on a change request. Can update the comment content and/or resolved status. Write update_effort_record [Project Management] 更新已登记的实际工时（云效实际工时受控字段，不能走 update_work_item.customFieldValues）。 Write update_estimated_effort [Project Management] 更新已登记的预计工时（云效预计工时受控字段，不能走 update_work_item.customFieldValues）。 Write update_file [Code Management] Update an existing file in a Codeup repository Write update_flow_variable_group [Pipeline Management] Update a Flow (pipeline) variable group by numeric id. Write update_global_var [application delivery] Update a global variable group Write update_pipeline [Pipeline Management] Update an existing pipeline in Yunxiao by pipelineId. Use this to update pipeline YAML, Write update_resource_member [Resource Member Management] Update a resource member Write update_resource_owner [Resource Member Management] Transfer resource owner Write update_sprint [Project Management] Update an existing sprint Write update_system_release_stage [application delivery] 更新系统发布流程阶段 Write update_tag [Tag Management] Update a tag Write update_tag_group [Tag Management] Update a tag group Write update_test_result [test management] 更新测试结果 Write update_variable_group [application delivery] Update a variable group Write update_version [Project Management] Update an existing version in a Yunxiao Project. Can update version name, owners, start d Write update_work_item [Project Management] Update a work item. \n调用参数结构：除 organizationId / workItemId 外，所有要更新的字段必须放在 updateWorkItemF
READ 116 tools
Read compare [Code Management] Query code to compare content Read find_task_operation_log [application delivery] 查询部署任务执行日志，其中通常包含下游部署引擎的调度细节信息 Read get_app_orchestration [application delivery] Get an application orchestration Read get_app_release_stage_job_log [application delivery] 查询研发阶段流水线任务运行日志 Read get_app_release_stage_pipeline_run [application delivery] 获取研发阶段流水线运行实例 Read get_app_release_workflow_stage [application delivery] 获取发布流程阶段详情 Read get_app_variable_groups [application delivery] Get variable groups for an application Read get_app_variable_groups_revision [application delivery] Get the revision of variable groups for an application Read get_application [application delivery] Get application details by name Read get_appstack_change_request_audit_items [application delivery] Get audit items for a change request Read get_artifact [Packages Management] Get information about a single artifact in a package repository Read get_branch [Code Management] Get information about a branch in a Codeup repository Read get_change_order [application delivery] 读取部署单使用的物料和工单状态 Read get_change_request [Code Management] Get detailed information about a specific change request (merge request) by its local ID. Read get_commit [Code Management] Get information about a commit Read get_current_organization_info Get information about the current user and organization based on the token. In the absence of an explicitly sp Read get_current_user Get information about the current user based on the token. In the absence of an explicitly specified user ID, Read get_env_variable_groups [application delivery] Get variable groups for an environment Read get_file_blobs [Code Management] Get file content from a Codeup repository Read get_flow_variable_group [Pipeline Management] Get a Flow (pipeline) variable group by numeric id. Read get_global_var [application delivery] Get a global variable group Read get_latest_orchestration [application delivery] Get the latest orchestration for an environment Read get_latest_pipeline_run [Pipeline Management] Get information about the latest pipeline run Read get_machine_deploy_log [application delivery] Get machine deployment log Read get_organization_department_ancestors Get the ancestors of a department in an organization Read get_organization_department_info Get information about a department in an organization Read get_organization_member_info Get information about a member in an organization Read get_organization_member_info_by_user_id Get information about a member in an organization by user ID Read get_organization_role [Organization Management] Get information about an organization role Read get_pipeline [Pipeline Management] Get details of a specific pipeline in an organization Read get_pipeline_job_run_log [Pipeline Management] Get the execution logs of a pipeline job. Retrieve the log content for a specific job in Read get_pipeline_job_step_log [Pipeline Management] Get the log content for a specific step of a pipeline job. Use GetPipelineJobSteps first Read get_pipeline_job_step_log_url [Pipeline Management] Get the download URL for a pipeline job step log. Use GetPipelineJobSteps first to get s Read get_pipeline_job_steps [Pipeline Management] Get the list of steps for a pipeline job. Returns step details including stepIndex and b Read get_pipeline_run [Pipeline Management] Get details of a specific pipeline run instance Read get_project [Project Management] Get information about a Yunxiao project Read get_repository [Code Management] Get information about a Codeup repository Read get_sprint [Project Management] Get information about a sprint Read get_tag_group [Tag Management] Get a tag group Read get_test_plan_progress [test management] 获取测试计划用例执行进度统计（通过/失败/延后/待执行） Read get_test_result_list [test management] 获取测试计划中测试用例列表 Read get_testcase [test management] 获取测试用例信息 Read get_testcase_field_config [test management] 获取测试用例字段配置 Read get_user_organizations Get the list of organizations the current user belongs to Read get_variable_group [application delivery] Get a variable group Read get_vm_deploy_machine_log [VM Deploy Order Management] Get VM deploy machine log Read get_vm_deploy_order [VM Deploy Order Management] Get VM deploy order details Read get_work_item [Project Management] Get information about a work item Read get_work_item_type [Project Management] Get details of a specific work item type Read get_work_item_type_field_config [Project Management] Get field configuration for a specific work item type Read get_work_item_types [Project Management] Get the list of work item types for a project Read get_work_item_workflow [Project Management] Get workflow information for a specific work item type Read get_workitem_file [Project Management] Get file information for a specific work item. Supports both file IDs (long hex for descr Read list_all_work_item_types [Project Management] List all work item types in an organization Read list_app_orchestration [application delivery] List application orchestrations Read list_app_release_stage_briefs [application delivery] 查询发布流程阶段摘要列表 Read list_app_release_stage_metadata [application delivery] 查询研发阶段执行记录集成变更信息 Read list_app_release_stage_runs [application delivery] 查询发布流程阶段执行记录列表 Read list_app_release_workflow_briefs [application delivery] 查询应用下所有发布流程摘要 Read list_app_release_workflows [application delivery] 查询应用下所有发布流程 Read list_application_sources [application delivery] List application sources with pagination Read list_applications [application delivery] List applications in an organization with pagination Read list_appstack_change_request_executions [application delivery] List change request executions Read list_appstack_change_request_work_items [application delivery] List work items for a change request Read list_appstack_change_requests [application delivery] Search change requests in an application with pagination and filtering Read list_artifacts [Packages Management] List artifacts in a package repository with filtering options Read list_attached_change_requests [application delivery] List change requests attached to a release Read list_branches [Code Management] List branches in a Codeup repository Read list_change_order_job_logs [application delivery] 查询环境部署单日志 Read list_change_order_versions [application delivery] 查看部署单版本列表 Read list_change_orders_by_origin [application delivery] 根据创建来源查询部署单 Read list_change_request_comments [Code Management] List comments on a change request. Supports filtering by comment type (GLOBAL_COMMENT or INL Read list_change_request_patch_sets [Code Management] List patch sets (versions) for a change request. Patch sets represent different versions of Read list_change_requests [Code Management] List change requests with multi-condition filtering, pagination and sorting. Supports filter Read list_commits [Code Management] List commits in a Codeup repository Read list_current_user_effort_records [Project Management] 获取用户的实际工时明细，结束时间和开始时间的间隔不能大于6个月 Read list_effort_records [Project Management] 获取实际工时明细 Read list_estimated_efforts [Project Management] 获取预计工时明细 Read list_files [Code Management] List file tree from a Codeup repository Read list_flow_variable_groups [Pipeline Management] List organization-level Flow (pipeline) variable groups with pagination. Read list_global_vars [application delivery] List global variable groups Read list_organization_departments Get the list of departments in an organization Read list_organization_members list user members in an organization Read list_organization_roles [Organization Management] List organization roles Read list_package_repositories [Packages Management] List package repositories in an organization with filtering options Read list_pipeline_job_historys [Pipeline Management] Get the execution history of a pipeline task. Retrieve all execution records for a speci Read list_pipeline_jobs_by_category [Pipeline Management] Get pipeline execution tasks by category. Currently only supports DEPLOY category. Read list_pipeline_runs [Pipeline Management] Get a list of pipeline run instances with filtering options Read list_pipelines [Pipeline Management] Get a list of pipelines in an organization with filtering options Read list_program_versions [Project Management] List versions for a Yunxiao Program (Project Set). Versions are used to manage release pl Read list_repositories [Code Management] Get the CodeUp Repository List.\n Read list_resource_members [Resource Member Management] Get a list of resource members Read list_service_connections [Service Connection Management] List service connections in an organization with filtering options Read list_sprints [Project Management] List sprints in a project Read list_system_release_workflows [application delivery] 查询系统下所有发布流程 Read list_tag_groups [Tag Management] Get a list of tag groups Read list_test_plan_result_directories [test management] 获取测试计划结果目录列表，按用例库分组返回目录树及每个目录下的用例数量 Read list_test_plans [test management] 获取测试计划列表 Read list_test_repo_tags [test management] 获取测试用例库标签列表，支持分页与按名称关键词过滤 Read list_test_repos [test management] 获取用例库列表，支持分页与按名称模糊筛选 Read list_testcase_comments [test management] 获取测试用例评论列表 Read list_testcase_directories [test management] 获取测试用例目录列表 Read list_versions [Project Management] List versions for a Yunxiao Project or Program. Versions are used to manage release plans Read list_work_item_comments [Project Management] List comments for a specific work item Read list_work_item_relation_work_item_types [Project Management] List work item types that can be related to a specific work item Read list_work_item_types [Project Management] List work item types in a project space Read list_workitem_activities [Project Management] List activity history for a specific work item. Returns changes including field updates, Read list_workitem_attachments [Project Management] List attachments for a specific work item. Returns attachment information including file Read search_app_tags [application delivery] Search application tags Read search_app_templates [application delivery] Search application templates Read search_organization_members [Organization Management] Search for organization members Read search_programs [Project Management] Search for Yunxiao Program (Project Set) List. A Program is a collection of multiple rela Read search_projects [Project Management] Search for Yunxiao Project List. A Project is a project management unit that includes wor Read search_testcases [test management] 搜索测试用例 Read search_workitems [Project Management] Search work items with various filter conditions Read smart_list_pipelines [Pipeline Management] Intelligently search pipelines with natural language time references (e.g.,
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Alibabacloud Devops

Can an AI agent delete data through the Alibabacloud Devops MCP server? +

Yes. The Alibabacloud Devops server exposes 12 destructive tools including cancel_app_release_stage_execution, cancel_appstack_change_request, delete_app_orchestration. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Alibabacloud Devops? +

The Alibabacloud Devops server has 55 write tools including add_host_list_to_deploy_group, add_host_list_to_host_group, close_appstack_change_request. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Alibabacloud Devops.

How many tools does the Alibabacloud Devops MCP server expose? +

202 tools across 4 categories: Destructive, Execute, Read, Write. 116 are read-only. 86 can modify, create, or delete data.

How do I enforce a policy on Alibabacloud Devops? +

Register the Alibabacloud Devops MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Alibabacloud Devops tool call.

Deterministic rules across all 202 Alibabacloud Devops tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ALIBABACLOUD DEVOPS →

Instant setup, no code required.

202 Alibabacloud Devops tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Alibabacloud Devops's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.