// SCAN REPORT

Coolify

111 tools. 67 can modify or destroy data without limits.

16 destructive tools with no built-in limits. Policy required.

Last updated:

67 can modify or destroy data
44 read-only
111 tools total

Community server · catalogue entry checked 11/06/2026

How to control Coolify ↓

TOOL MAP

What Coolify exposes to your agents

Read (44) Write / Execute (51) Destructive / Financial (16)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Coolify tools

Destructive · High delete_application Deletion of an application is an irreversible action that cannot be undone. Destructive · High delete_application_env Deletion of environment variables is an irreversible operation that cannot be undone without recreation. Destructive · High delete_application_scheduled_task Deleting a scheduled task permanently removes automation configuration that cannot be restored without manual recreation. Destructive · High delete_application_storage The tool performs an irreversible deletion operation on application storage.

67 of Coolify's 111 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Coolify

PolicyLayer is an MCP gateway — it sits between your AI agents and Coolify, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete_application": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "bulk_update_application_envs": {
    "limits": [
      {
        "counter": "bulk_update_application_envs_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get_application": {
    "limits": [
      {
        "counter": "get_application_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Coolify — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON COOLIFY →

Instant setup, no code required.

FULL CATALOGUE

All 111 Coolify tools

DESTRUCTIVE 16 tools
Destructive delete_application Delete an application by UUID. Destructive delete_application_env Delete an environment variable from an application. Destructive delete_application_scheduled_task Delete a scheduled task from an application. Destructive delete_application_storage Delete a storage from an application. Destructive delete_cloud_token Delete a cloud provider token. Fails if used by any servers. Destructive delete_database Delete a database by UUID. Destructive delete_database_env Delete an environment variable from a database. Destructive delete_environment Delete an environment (must be empty) from a project. Destructive delete_github_app Delete a GitHub App (only if not used by any applications). Destructive delete_private_key Delete a private key by UUID. Destructive delete_project Delete a project by UUID. Destructive delete_server Delete a server by UUID. Destructive delete_service Delete a service by UUID. Destructive delete_service_env Delete an environment variable from a service. Destructive delete_service_scheduled_task Delete a scheduled task from a service. Destructive disable_api Disable the Coolify API. Requires root-level token.
EXECUTE 12 tools
Execute cancel_deployment Cancel a running deployment by UUID. Execute deploy_by_tag_or_uuid Trigger a deployment by tag or UUID. Supports force deploy and pull-request deployments. Execute enable_api Enable the Coolify API. Requires root-level token. Execute restart_application Restart an application. Execute restart_database Restart a database. Execute restart_service Restart a service. Execute start_application Start an application. Execute start_database Start a database. Execute start_service Start a service. Execute stop_application Stop a running application. Execute stop_database Stop a database. Execute stop_service Stop a service.
WRITE 39 tools
Write bulk_update_application_envs Bulk update environment variables for an application. Write create_application_env Create an environment variable for an application. Write create_application_scheduled_task Create a scheduled task for an application. Write create_application_storage Create a storage for an application. Write create_clickhouse_database Create a Clickhouse database. Write create_cloud_token Create and validate a new cloud provider token. Write create_database_backup Create a scheduled backup configuration for a database. Write create_database_env Create an environment variable for a database. Write create_dockercompose_application Create an application from a Docker Compose file (no Git). Write create_dockerfile_application Create an application from a Dockerfile (no Git). Write create_dockerimage_application Create an application from a prebuilt Docker image. Write create_dragonfly_database Create a DragonFly database. Write create_environment Create a new environment within a project. Write create_github_app Create a new GitHub App integration. Write create_hetzner_server Create a Hetzner Cloud server and register it in Coolify. Write create_keydb_database Create a KeyDB database. Write create_mariadb_database Create a MariaDB database. Write create_mongodb_database Create a MongoDB database. Write create_mysql_database Create a MySQL database. Write create_postgresql_database Create a PostgreSQL database. Write create_private_deploy_key_application Create an application from a private repository using a Deploy Key. Write create_private_github_app_application Create an application from a private GitHub repository using a GitHub App. Write create_private_key Create a new SSH private key. Write create_project Create a new project. Write create_public_application Create an application from a public Git repository. Write create_redis_database Create a Redis database. Write create_server Register a new server in Coolify. Write create_service Create a one-click or custom service. Provide either Write create_service_env Create an environment variable for a service. Write create_service_scheduled_task Create a scheduled task for a service. Write disable_mcp Disable the built-in Coolify MCP server endpoint at /mcp. Requires root-level token. Write enable_mcp Enable the built-in Coolify MCP server endpoint at /mcp. Requires root-level token. Write update_application Update an application by UUID. Write update_application_env Update an environment variable for an application. Write update_database Update a database by UUID. Write update_private_key Update an existing private key. Write update_project Update a project by UUID. Write update_server Update an existing server by UUID. Write update_service Update a service by UUID.
READ 44 tools
Read get_application Get an application by UUID. Read get_application_logs Get application logs. Read get_current_team Get the team associated with the current API token. Read get_current_team_members Get members of the current authenticated team. Read get_database Get a database by UUID. Read get_database_backups Get backup configurations for a database. Read get_deployment Get a deployment by UUID. Read get_environment Get an environment by name or UUID within a project. Read get_hetzner_images Get all available Hetzner OS images. Read get_hetzner_locations Get all available Hetzner datacenter locations. Read get_hetzner_server_types Get all available Hetzner server types and pricing. Read get_hetzner_ssh_keys Get all SSH keys stored in a Hetzner account. Read get_private_key Get a private key by UUID. Read get_project Get a project by UUID. Read get_server Get details of a server by UUID. Read get_server_domains Get all domains configured on a server. Read get_server_resources Get all resources (applications, databases, services) running on a server. Read get_service Get a service by UUID. Read get_team Get details of a specific team by its numeric ID. Read get_team_members Get members of a specific team by its numeric ID. Read get_version Get the Coolify version string (e.g. Read health_check Healthcheck endpoint. Does not require authentication. Returns Read list_application_envs List all environment variables for an application. Read list_application_scheduled_tasks List all scheduled tasks for an application. Read list_application_storages List all persistent and file storages for an application. Read list_applications List all applications. Optionally filter by tag. Read list_cloud_tokens List all cloud provider tokens (Hetzner, DigitalOcean, etc.). Read list_database_backup_executions List all executions for a backup configuration. Read list_database_envs List environment variables for a database. Read list_databases List all databases. Read list_deployments List currently running deployments. Read list_deployments_by_application List deployments for a specific application. Read list_environments List all environments in a project. Read list_github_app_repositories List repositories accessible to a GitHub App. Read list_github_apps List all configured GitHub Apps. Read list_private_keys List all SSH private keys. Read list_projects List all projects. Read list_resources Get all resources (applications, databases, services) across the Coolify instance. Read list_servers List all servers registered in Coolify. Read list_service_envs List environment variables for a service. Read list_service_scheduled_tasks List all scheduled tasks for a service. Read list_services List all services. Read list_teams List all teams the authenticated token has access to. Read validate_server Validate server connectivity and configuration.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Coolify

Can an AI agent delete data through the Coolify MCP server? +

Yes. The Coolify server exposes 16 destructive tools including delete_application, delete_application_env, delete_application_scheduled_task. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Coolify? +

The Coolify server has 39 write tools including bulk_update_application_envs, create_application_env, create_application_scheduled_task. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Coolify.

How many tools does the Coolify MCP server expose? +

111 tools across 4 categories: Destructive, Execute, Read, Write. 44 are read-only. 67 can modify, create, or delete data.

How do I enforce a policy on Coolify? +

Register the Coolify MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Coolify tool call.

Deterministic rules across all 111 Coolify tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON COOLIFY →

Instant setup, no code required.

111 Coolify tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Coolify's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.