New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice
// SCAN REPORT

Portkey Admin

170 tools. 88 can modify or destroy data without limits.

23 destructive tools with no built-in limits. Policy required.

Last updated:

88 can modify or destroy data
82 read-only
170 tools total

Community server · catalogue entry checked 30/08/2026

How to control Portkey Admin ↓

TOOL MAP

What Portkey Admin exposes to your agents

Read (82) Write / Execute (65) Destructive / Financial (23)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Portkey Admin tools

Destructive · High archive_deployment Archiving a deployment deactivates it irreversibly, stopping active operations even if history persists. Destructive · High cancel_log_export Cancelling a log export job is an irreversible action: the job is permanently terminated with no rollback of partial state. Destructive · High delete_api_key This tool irreversibly deletes API keys and cannot be undone. Destructive · High delete_collection Although the deletion is non-total (prompts remain in the workspace), the collection itself is permanently removed and cannot be recovered.

88 of Portkey Admin's 170 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Portkey Admin

PolicyLayer is an MCP gateway — it sits between your AI agents and Portkey Admin, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "archive_deployment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_workspace_member": {
    "limits": [
      {
        "counter": "add_workspace_member_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "download_log_export": {
    "limits": [
      {
        "counter": "download_log_export_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Portkey Admin — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON PORTKEY ADMIN →

Instant setup, no code required.

FULL CATALOGUE

All 170 Portkey Admin tools

DESTRUCTIVE 23 tools
Destructive archive_deployment Enterprise-gated. Archive a registered Gateway deployment by UUID. Use get_deployment first to confirm the tar Destructive cancel_log_export Cancel a pending or running log export job, unlike start_log_export which queues one or delete_integration whi Destructive delete_api_key Delete an API key by UUID. This cannot be undone, revokes access immediately, and can break active sessions us Destructive delete_collection Delete a prompt collection by ID. This cannot be undone; prompts stay in the workspace but lose their collecti Destructive delete_config Delete a config by slug. This is permanent, removes all versions, and breaks anything still pointing at that s Destructive delete_guardrail Delete a guardrail by id or slug. This is irreversible and removes the check from any configs that reference i Destructive delete_integration Delete an integration by slug. This is irreversible and stops the org-level connection, which will break depen Destructive delete_integration_model Delete a custom model from an integration. Built-in models should be disabled instead, because deletion only a Destructive delete_mcp_integration Delete an MCP integration and all servers beneath it. This is irreversible, removes connected access immediate Destructive delete_mcp_server Delete an MCP server instance. This is irreversible, removes connected users Destructive delete_prompt Delete a prompt and all its versions by id. This cannot be undone, immediately breaks callers using the slug, Destructive delete_prompt_label Delete a prompt label by ID. This cannot be undone; versions carrying the label lose it, and any workflow reso Destructive delete_prompt_partial Delete a prompt partial by ID. This cannot be undone, and prompts that reference it with {{> name}} will fail Destructive delete_provider Delete a workspace provider by slug. This is irreversible and will break prompts, configs, and virtual keys th Destructive delete_rate_limit Delete a rate-limit policy by id. Portkey removes the active throttling policy immediately, so inspect depende Destructive delete_scim_workspace_mapping Delete a SCIM group-to-workspace mapping by mapping_id and stop future group updates from affecting that works Destructive delete_secret_reference Permanently delete a Secret Reference. This is irreversible and integrations or virtual keys using it can fail Destructive delete_usage_limit Archive a cumulative usage-limit policy by id. The policy stops enforcing its budget but its historical record Destructive delete_user Delete a user from the org by id. This is permanent, removes org and workspace memberships, revokes API keys, Destructive delete_user_invite Delete a pending invite and revoke its invite link. This does not affect existing users; use delete_user for f Destructive delete_virtual_key Delete a virtual key by slug. This is irreversible and will break prompts and configs that reference the slug, Destructive delete_workspace Delete a workspace by id. This is permanent and removes the workspace, its members, configs, API keys, and res Destructive remove_workspace_member Remove a user from a workspace and revoke workspace access. This does not delete the user from the organizatio
EXECUTE 3 tools
Execute run_prompt_completion Execute a prompt against the configured model and return the completion. This makes a billable model call, so Execute start_log_export Start processing a previously created log export job. This is asynchronous, only queues the export, and does n Execute test_mcp_server Test connectivity to an MCP server. Sends a live check and returns success, response time, HTTP status, and an
WRITE 62 tools
Write add_workspace_member Add an existing org user to a workspace with a role. Requires a UUID user_id; use list_all_users to find it, a Write create_api_key Create a Portkey API key for auth. Org keys grant broader access; workspace keys are scoped. WARNING: The key Write create_collection Create a new prompt collection for organizing prompts by app. Use this when you need a new namespace before cr Write create_config Create a config that defines routing, cache, retry, and targets for requests; use update_config to modify an e Write create_feedback Create feedback for a trace or request. Writes a new feedback record linked by trace_id, returns the created f Write create_guardrail Create a guardrail with checks and actions for request filtering. Create it first, then reference it from conf Write create_integration Create an AI-provider integration that becomes the source for workspace providers. ai_provider_id identifies t Write create_log_export Create a log export definition with filters and requested fields. This only sets up the export and does not st Write create_mcp_integration Create a Portkey integration for an external MCP server URL. For headers auth, provide custom_headers or a Sec Write create_mcp_server Create an MCP server under an existing integration. Registers the server and returns the new id and slug; use Write create_prompt Create a new prompt template and initial version. Use this for first-time setup; use migrate_prompt for idempo Write create_prompt_label Create a prompt label for tagging prompt versions such as production, staging, or experiment. Requires either Write create_prompt_partial Create a reusable prompt partial for inclusion with {{> partial_name}}. Use this for shared snippets or macros Write create_provider Create a workspace provider backed by an org integration. The provider inherits the integration key, but its l Write create_rate_limit Create a request or token rate-limit policy. Conditions and grouping must be non-empty; target llm uses model/ Write create_scim_workspace_mapping Map one identity-provider SCIM group to a Portkey workspace role so current and future group members receive a Write create_secret_reference Create a reference to a secret stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault. Authenticat Write create_usage_limit Create a cumulative cost or token usage-limit policy with non-empty conditions and grouping. A periodic reset Write create_virtual_key Store a provider API key as a virtual key. The raw key is encrypted and only returned at creation time, so sav Write create_workspace Create a workspace to isolate resources, API keys, and team members. If slug is omitted it is auto-generated f Write disconnect_mcp_server_connection Disconnect one user Write insert_log Insert log records for requests that bypassed the gateway. This writes request, response, and trace metadata i Write invite_user Invite a new org user and optionally provision workspace access and an API key in one call. Workspace assignme Write migrate_prompt Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows, unlike create_prompt whic Write promote_prompt Copy a prompt from one environment to another and create or update the target automatically. Use this for stag Write publish_partial Publish a specific partial version as the default, unlike update_prompt_partial which creates a new draft with Write publish_prompt Publish a specific version of a prompt as the active default, unlike promote_prompt which copies across enviro Write register_deployment Enterprise-gated. Register a self-hosted Gateway deployment when onboarding a new control-plane target; use li Write resend_user_invite Resend the email for a pending invite that has not been accepted, unlike invite_user which creates a new invit Write reset_usage_limit_entity Reset the current usage counter for one tracked usage-limit entity. This changes enforcement immediately for t Write rotate_api_key Rotate an API key without changing its identity or scopes. The new secret is returned once and exposed to this Write update_api_key Update an API key Write update_collection Update a collection Write update_config Update a config by slug; every call creates a new config version rather than overwriting, so earlier versions Write update_deployment Enterprise-gated. Update a registered Gateway deployment, its workspace or JWT-sub access, or rotate its authe Write update_feedback Update an existing feedback record by ID. Returns the updated status and feedback IDs, changes only value, wei Write update_guardrail Update a guardrail Write update_input_guardrail_workspace_exclusions Set workspace exclusions from organisation-wide input guardrails. Each entry excludes or restores one workspac Write update_integration Update an integration Write update_integration_models Bulk enable or disable integration models, register custom or fine-tuned models, set per-model hosts and heade Write update_integration_workspaces Control per-workspace and global access to an integration, including cost/rate limits, usage resets, and autom Write update_log_export Update an existing log export configuration before or between export runs. Only workspace_id, time_of_generati Write update_mcp_integration Update an MCP integration Write update_mcp_integration_capabilities Bulk enable or disable capabilities (tools, prompts, resources) on an MCP integration. A reversible toggle, no Write update_mcp_integration_workspaces Grant or revoke workspace access to an MCP integration in bulk. Reversible: only the workspaces listed change, Write update_mcp_server Update an MCP server Write update_mcp_server_capabilities Enable or disable capabilities on an MCP server. Changes take effect immediately and override the integration- Write update_mcp_server_user_access Grant or revoke individual user access to an MCP server. Changes take effect immediately and override the defa Write update_organisation_defaults Replace the organisation-wide default input and/or output guardrail lists inherited by workspaces. Only suppli Write update_output_guardrail_workspace_exclusions Set workspace exclusions from organisation-wide output guardrails. Each entry excludes or restores one workspa Write update_prompt Update an existing prompt and create a new archived version. Only provided fields change, and publish_prompt i Write update_prompt_label Update a prompt label Write update_prompt_partial Create a new version of a partial by updating its content or metadata. Only provided fields change, and the ne Write update_prompt_version Update a specific prompt version Write update_provider Update a provider Write update_rate_limit Update a rate-limit policy Write update_secret_reference Update at least one selected field on a Secret Reference. auth_config is merged into the existing manager-spec Write update_usage_limit Update a cumulative usage-limit policy Write update_user Update a user Write update_virtual_key Update a virtual key Write update_workspace Update a workspace Write update_workspace_member Update a workspace member
READ 82 tools
Read download_log_export Get a signed URL for downloading a completed log export. The export must already be finished; use get_log_expo Read get_analytics_group_metadata Get a paginated metadata breakdown with total_groups, group_count, and a metadata_groups array grouped by the Read get_analytics_group_models Get a paginated per-model breakdown with total_groups, group_count, and a models array containing request coun Read get_analytics_group_providers Enterprise-gated. Get provider-grouped analytics for one workspace and time range with selectable metrics, ord Read get_analytics_group_users Get a paginated per-user breakdown with total_groups, group_count, and a users array containing request count, Read get_api_key Fetch one API key by UUID without revealing the secret. Use this to inspect scopes, defaults, limits, expirati Read get_cache_hit_latency Get cache-hit-only latency time-series data with summary.total_latency, summary.avg_latency, and per-bucket to Read get_cache_hit_rate Get cache-effectiveness time-series data with summary.hit_rate, summary.total_hits, summary.total_misses, and Read get_cache_summary Enterprise-gated. Get cache summary metrics for one workspace and time range: hits, average cache-hit latency, Read get_collection Fetch one collection by id or slug and return its name, slug, workspace, and timestamps. Use list_collections Read get_config Get one config by slug and return its routing, cache, retry, and target settings. Requires a known slug; use l Read get_cost_analytics Get cost time-series data with summary.total_cost, summary.average_cost_per_request, and per-bucket total/avg Read get_deployment Enterprise-gated. Get one registered Gateway deployment by UUID, or use self when authenticating as that deplo Read get_error_analytics Get error-count time-series data with summary.total_errors and per-bucket counts. Use this for high-level erro Read get_error_rate_analytics Get error-rate time-series data with summary.error_rate_percent and per-bucket percentages of total requests. Read get_guardrail Fetch one guardrail by id or slug with its full checks and actions; use list_guardrails to discover ids first. Read get_integration Fetch one integration by slug, including masked key, workspace access, allowed models, and configuration metad Read get_latency_analytics Get latency time-series data with summary.avg_latency_ms, summary.p50_latency_ms, summary.p90_latency_ms, summ Read get_log Get one gateway request log by ID, including its request, response, usage, cost, and metadata payload when ava Read get_log_export Fetch one log export job by export_id and return its status, filters, requested fields, and file metadata. Use Read get_log_export_field_restrictions Get the organisation-managed fields that a workspace is restricted from including in log exports. Use before c Read get_mcp_integration Retrieve one MCP integration by id or slug. Returns the full Portkey-side config, including auth type, transpo Read get_mcp_integration_metadata Retrieve the external MCP server Read get_mcp_server Retrieve one MCP server by id or slug. Returns server details including the parent integration, status, and cr Read get_model_pricing Get Portkey Read get_organisation_defaults Get the organisation-wide input and output guardrails that workspaces inherit by default. Use this before upda Read get_prompt Fetch a prompt Read get_prompt_label Fetch one label Read get_prompt_partial Fetch a partial Read get_prompt_version Retrieve a specific prompt version by its version UUID. Use list_prompt_versions to find the id first; returns Read get_provider Fetch one provider by slug, including limits, rate settings, expiration, and reset status. Use this to check c Read get_rate_limit Get one rate-limit policy by id, including current conditions, grouping, unit, value, target, scope, and statu Read get_request_analytics Get request-volume time-series data with summary.total_requests, summary.successful_requests, summary.failed_r Read get_secret_reference Retrieve one Secret Reference by UUID or slug. Portkey masks sensitive authentication fields for non-system us Read get_token_analytics Get token-usage time-series data with summary.total_tokens, summary.prompt_tokens, summary.completion_tokens, Read get_usage_limit Get one cumulative usage-limit policy by id. Use list_usage_limits first when the id is unknown. Optionally in Read get_user Get one accepted user by id and return their profile, role, and timestamps. Use list_all_users to find the id Read get_user_invite Get one invitation by invite id and return its email, role, status, and expiry. Use this for pending invites o Read get_user_stats Return per-user request and cost analytics for a required time range. This is usage-by-user, not population me Read get_users_analytics Get user-growth time-series data with summary.total_active_users, summary.total_new_users, and per-bucket acti Read get_virtual_key Fetch one virtual key by slug, including metadata, a masked secret, limits, status, and model config. Use this Read get_workspace Get one workspace by id and return its full details, including defaults and the complete member list. Use this Read get_workspace_member Get one workspace member by workspace_id and user_id. Use this when you already know both IDs; use list_worksp Read list_all_users List accepted org users with id, name, email, role, and timestamps. Use this to find a user_id before get_user Read list_api_keys List Portkey API keys for auditing access, scopes, defaults, limits, and expiration. Use this for API keys onl Read list_audit_logs List audit log events for a Portkey workspace or organization. Returns paginated action-level records with act Read list_collections List prompt collections in the workspace, optionally filtering by name or workspace. Returns ids, names, slugs Read list_config_versions List every version of a config with version_id, structured config payload, updater, and timestamp. Use this to Read list_configs List configs in the org with id, slug, name, status, workspace, and timestamps. Use this summary view to find Read list_deployments Enterprise-gated. List registered self-hosted Gateway deployments with status, type, default state, and connec Read list_guardrails List guardrails in the org with id, slug, status, ownership, and optional workspace/org filters. Use this to f Read list_input_guardrail_workspace_exclusions List workspaces excluded from organisation-wide input guardrails for one organisation. Use this to audit excep Read list_integration_models List models enabled on an integration. Use this to verify model availability before creating prompts or config Read list_integration_workspaces List workspaces that can use an integration, with their limits. Use this to audit access or confirm per-worksp Read list_integrations List org-level AI provider connections with optional workspace or type filters. Use this to find integration s Read list_log_exports List log export jobs in a workspace with status, filters, and timestamps. Use this to find an export_id before Read list_mcp_integration_capabilities List capabilities exposed by the external MCP server for an integration. Returns total plus enabled-state entr Read list_mcp_integration_workspaces List which workspaces can access an MCP integration. Returns the global access mode plus per-workspace enablem Read list_mcp_integrations List MCP integrations in the organization. Returns paginated integration records plus total and has_more for d Read list_mcp_server_capabilities List capabilities exposed by an MCP server instance. Returns total plus the current tool, resource, and prompt Read list_mcp_server_connections List active connection records for one Portkey-managed MCP server, including user, connected state, and connec Read list_mcp_server_user_access List per-user access for an MCP server. Returns the default access mode, override flags, and connection status Read list_mcp_servers List MCP servers in the organization. Returns paginated server records plus total for discovering server IDs; Read list_output_guardrail_workspace_exclusions List workspaces excluded from organisation-wide output guardrails for one organisation. Use this to audit exce Read list_partial_versions List all versions for one partial, including version numbers, descriptions, status, and timestamps. Use this w Read list_prompt_labels List labels across the workspace or organisation, with optional search and scope filters. Returns ids, names, Read list_prompt_partials List partials across collections, with optional collection filtering. Returns ids, slugs, names, collections, Read list_prompt_versions List all versions of one prompt, including version number, description, status, label, and a short template pr Read list_prompts List prompts across the workspace, with optional collection, workspace, or search filters. Returns a paginated Read list_providers List workspace-scoped provider instances and their limits or status. Use this to find provider slugs for works Read list_rate_limits List rate-limit policies with their current condition, grouping, rate unit, target, status, and scope. Filter Read list_scim_groups Search and page through identity-provider groups synchronized to Portkey over SCIM. Use this to resolve a grou Read list_scim_workspace_mappings List identity-provider SCIM group mappings that automatically grant Portkey workspace roles. Use it to audit p Read list_secret_references List Secret References without returning authentication configuration or resolved secret values. Filter by man Read list_usage_limit_entities List the values currently tracked by one usage-limit policy with each value key and current usage. Filter by a Read list_usage_limits List cumulative cost or token usage-limit policies with current conditions, grouping, reset schedule, status, Read list_user_invites List pending and sent invitations with id, email, role, status, and expiry. Use this to check invite state; us Read list_virtual_keys List provider API keys stored as virtual keys in your Portkey org. Use this to find slugs before wiring prompt Read list_workspace_members List every member in a workspace with organization role, workspace role, status, and timestamps. Use this to f Read list_workspaces List workspaces with id, name, slug, default settings, and timestamps. Use this to find a workspace_id before Read render_prompt Render a prompt by substituting variables and returning the final messages without calling the model. Use this Read validate_completion_metadata Preflight billing metadata before run_prompt_completion. Validates required fields and values without making c
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1662 tools
adminautomation
Delx Protocol — Agent Recovery & Continuity 1076 tools
adminautomation
Delx Mcp A2a 1068 tools
adminautomation
Nodebench 824 tools
adminautomation
MCP Framework Personal 811 tools
adminautomation
Delx MCP Server 740 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Eda Agent 726 tools
adminautomation
FAQ

Questions about Portkey Admin

Can an AI agent delete data through the Portkey Admin MCP server? +

Yes. The Portkey Admin server exposes 23 destructive tools including archive_deployment, cancel_log_export, delete_api_key. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Portkey Admin? +

The Portkey Admin server has 62 write tools including add_workspace_member, create_api_key, create_collection. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Portkey Admin.

How many tools does the Portkey Admin MCP server expose? +

170 tools across 4 categories: Destructive, Execute, Read, Write. 82 are read-only. 88 can modify, create, or delete data.

How do I enforce a policy on Portkey Admin? +

Register the Portkey Admin MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Portkey Admin tool call.

Deterministic rules across all 170 Portkey Admin tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PORTKEY ADMIN →

Instant setup, no code required.

170 Portkey Admin tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Portkey Admin's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.