// SCAN REPORT

Arcane

180 tools. 79 can modify or destroy data without limits.

21 destructive tools with no built-in limits. Policy required.

Last updated:

79 can modify or destroy data
101 read-only
180 tools total
// TOOL MAP
Read (101) Write / Execute (58) Destructive / Financial (21)
// WHAT CAN GO WRONG
✕

Destructive tools (arcane_apikey_delete, arcane_container_delete, arcane_environment_delete) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

✕

Write operations (arcane_apikey_create, arcane_auth_login, arcane_container_create) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

✕

Execute tools (arcane_build_get, arcane_build_image, arcane_build_list) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

// RECOMMENDED RULES
Deny destructive operations
arcane_apikey_delete:
  rules:
    - action: deny

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
arcane_apikey_create:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
arcane_apikey_list:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 180 ARCANE TOOLS
DESTRUCTIVE 21 tools
Destructive arcane_apikey_delete Destructive arcane_container_delete Destructive arcane_environment_delete Destructive arcane_event_delete Destructive arcane_git_repo_delete Destructive arcane_gitops_delete Destructive arcane_image_delete Destructive arcane_image_prune Destructive arcane_network_delete Destructive arcane_network_prune Destructive arcane_project_destroy Destructive arcane_project_down Destructive arcane_registry_delete Destructive arcane_swarm_delete_service Destructive arcane_system_prune Destructive arcane_template_delete Destructive arcane_user_delete Destructive arcane_volume_backup_delete Destructive arcane_volume_delete Destructive arcane_volume_prune Destructive arcane_webhook_delete
EXECUTE 19 tools
Execute arcane_build_get Execute arcane_build_image Execute arcane_build_list Execute arcane_build_workspace_browse Execute arcane_build_workspace_get_content Execute arcane_build_workspace_upload Execute arcane_container_restart Execute arcane_container_start Execute arcane_container_stop Execute arcane_gitops_sync Execute arcane_job_run Execute arcane_project_build Execute arcane_project_restart Execute arcane_project_up Execute arcane_swarm_scale_service Execute arcane_system_containers_start_all Execute arcane_system_containers_start_stopped Execute arcane_system_containers_stop_all Execute arcane_updater_run
WRITE 39 tools
Write arcane_apikey_create Write arcane_auth_login Write arcane_container_create Write arcane_container_set_auto_update Write arcane_container_update Write arcane_environment_create Write arcane_environment_update Write arcane_event_create Write arcane_git_repo_create Write arcane_gitops_create Write arcane_gitops_update Write arcane_image_update_check Write arcane_image_update_check_all Write arcane_image_update_check_by_id Write arcane_image_update_check_multiple Write arcane_image_update_get_summary Write arcane_job_schedule_get Write arcane_job_schedule_update Write arcane_network_create Write arcane_notification_apprise_update Write arcane_notification_update_settings Write arcane_project_create Write arcane_project_update Write arcane_registry_create Write arcane_registry_update Write arcane_settings_update Write arcane_swarm_create_service Write arcane_swarm_update_service Write arcane_template_create Write arcane_template_update Write arcane_template_update_variables Write arcane_updater_update_container Write arcane_user_create Write arcane_user_update Write arcane_volume_backup_create Write arcane_volume_backup_restore Write arcane_volume_create Write arcane_webhook_create Write arcane_webhook_update
READ 101 tools
Read arcane_apikey_list Read arcane_auth_change_password Read arcane_auth_logout Read arcane_auth_me Read arcane_auth_refresh Read arcane_container_get Read arcane_container_get_counts Read arcane_container_list Read arcane_container_redeploy Read arcane_dashboard_get Read arcane_dashboard_get_action_items Read arcane_environment_get Read arcane_environment_get_deployment_snippets Read arcane_environment_get_docker_info Read arcane_environment_get_version Read arcane_environment_list Read arcane_environment_pair_agent Read arcane_environment_test Read arcane_event_list Read arcane_event_list_by_environment Read arcane_git_repo_browse_files Read arcane_git_repo_get_branches Read arcane_git_repo_list Read arcane_git_repo_test Read arcane_gitops_get Read arcane_gitops_get_status Read arcane_gitops_list Read arcane_image_check_update Read arcane_image_check_updates_all Read arcane_image_get Read arcane_image_get_counts Read arcane_image_get_update_summary Read arcane_image_list Read arcane_image_pull Read arcane_job_list Read arcane_network_get Read arcane_network_get_counts Read arcane_network_get_topology Read arcane_network_list Read arcane_notification_apprise_get Read arcane_notification_apprise_test Read arcane_notification_get_settings Read arcane_notification_test Read arcane_oidc_device_code Read arcane_oidc_get_config Read arcane_oidc_get_status Read arcane_port_list Read arcane_project_get Read arcane_project_get_counts Read arcane_project_list Read arcane_project_pull_images Read arcane_project_redeploy Read arcane_registry_get Read arcane_registry_list Read arcane_registry_sync Read arcane_registry_test Read arcane_settings_get Read arcane_settings_get_categories Read arcane_settings_get_public Read arcane_settings_search Read arcane_swarm_get_cluster_info Read arcane_swarm_get_service Read arcane_swarm_get_service_logs Read arcane_swarm_init_cluster Read arcane_swarm_join_cluster Read arcane_swarm_leave_cluster Read arcane_swarm_list_services Read arcane_system_check_upgrade Read arcane_system_get_docker_info Read arcane_system_get_health Read arcane_system_upgrade Read arcane_template_get Read arcane_template_get_content Read arcane_template_get_variables Read arcane_template_list Read arcane_updater_get_history Read arcane_updater_get_status Read arcane_user_get Read arcane_user_list Read arcane_version_get Read arcane_volume_backup_list Read arcane_volume_backup_list_files Read arcane_volume_browse Read arcane_volume_browse_content Read arcane_volume_browse_mkdir Read arcane_volume_get Read arcane_volume_get_counts Read arcane_volume_list Read arcane_vulnerability_get_environment_summary Read arcane_vulnerability_get_image_options Read arcane_vulnerability_get_scan_result Read arcane_vulnerability_get_scan_summaries Read arcane_vulnerability_get_scan_summary Read arcane_vulnerability_get_scanner_status Read arcane_vulnerability_ignore Read arcane_vulnerability_list Read arcane_vulnerability_list_all Read arcane_vulnerability_list_ignored Read arcane_vulnerability_scan_image Read arcane_vulnerability_unignore Read arcane_webhook_list
// FAQ
Can an AI agent delete data through the Arcane MCP server? +

Yes. The Arcane server exposes 21 destructive tools including arcane_apikey_delete, arcane_container_delete, arcane_environment_delete. These permanently remove resources with no undo. Intercept blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Arcane? +

The Arcane server has 39 write tools including arcane_apikey_create, arcane_auth_login, arcane_container_create. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the Arcane MCP server expose? +

180 tools across 4 categories: Destructive, Execute, Read, Write. 101 are read-only. 79 can modify, create, or delete data.

How do I add Intercept to my Arcane setup? +

One line change. Instead of running the Arcane server directly, prefix it with Intercept: intercept -c arcane.yaml -- npx -y @@randomsynergy/arcane-mcp-server. Download a pre-built policy from policylayer.com/policies/arcane and adjust the limits to match your use case.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies available for each. Same risk classification, same one-command setup.

Mcp Api 314 tools
adminautomation
Aibtc 308 tools
adminautomation
SmartBear MCP 243 tools
adminautomation
Google Super 200 tools
adminautomation
Propresenter 177 tools
adminautomation
Leaper Vision Toolkit 169 tools
adminautomation
Opencut Controller 161 tools
adminautomation
Apiosk 160 tools
adminautomation

Let agents act without letting them run wild.

Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.

Currently onboarding teams running MCP in production.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.

// REQUEST EARLY ACCESS

We're letting people in as fast as we can.

You're in the queue.

We'll be in touch as soon as we can let you in.