// SCAN REPORT

ArvanCloud MCP Server

232 tools. 135 can modify or destroy data without limits.

33 destructive tools with no built-in limits. Policy required.

Last updated:

135 can modify or destroy data
97 read-only
232 tools total

Community server · catalogue entry checked 02/07/2026

How to control ArvanCloud MCP Server ↓

TOOL MAP

What ArvanCloud MCP Server exposes to your agents

Read (97) Write / Execute (102) Destructive / Financial (33)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous ArvanCloud MCP Server tools

Destructive · High arvan_delete_cdn_app This tool permanently removes a CDN app, which cannot be undone. Destructive · High arvan_delete_dns_record This tool permanently removes DNS records, which cannot be undone and would disrupt domain resolution services. Destructive · High arvan_delete_domain Deleting a domain is an irreversible operation that removes DNS records, routing configurations, and CDN settings associated with that domain. Destructive · High arvan_delete_firewall_rule Deleting a firewall rule is a destructive action that removes security controls and cannot be reversed without recreating the rule.

135 of ArvanCloud MCP Server's 232 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ArvanCloud MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and ArvanCloud MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "arvan_delete_cdn_app": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "arvan_attach_floating_ip": {
    "limits": [
      {
        "counter": "arvan_attach_floating_ip_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "arvan_account_details": {
    "limits": [
      {
        "counter": "arvan_account_details_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register ArvanCloud MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON ARVANCLOUD →

Instant setup, no code required.

FULL CATALOGUE

All 232 ArvanCloud MCP Server tools

DESTRUCTIVE 33 tools
Destructive arvan_delete_cdn_app Delete a CDN app by id. Destructive arvan_delete_dns_record Delete a DNS record by id. Destructive arvan_delete_domain Remove a domain from the CDN. Destructive arvan_delete_firewall_rule Delete a firewall (WAF) rule by id. Destructive arvan_delete_floating_ip Release (delete) a floating IP address by id. Destructive arvan_delete_log_forwarder Delete a log forwarder by id. Destructive arvan_delete_page_rule Delete a page rule by id. Destructive arvan_delete_ptr_record Delete a reverse-DNS (PTR) record by id. Destructive arvan_delete_rate_limit_rule Delete a rate-limit rule by id. Destructive arvan_delete_security_group Delete a security group by id. Destructive arvan_delete_security_rule Delete a security-group rule by id. Destructive arvan_delete_server Delete a cloud server. Set force_delete_floating_ips to also release IPs. Destructive arvan_delete_ssh_key Delete a registered SSH key by name. Destructive arvan_delete_subnet Delete a private-network subnet by id. Destructive arvan_delete_tag Delete a resource tag by id. Destructive arvan_delete_volume Delete a block-storage volume by id. Destructive arvan_helm_uninstall Uninstall a Helm release. Destructive arvan_iac_terraform_destroy Run terraform destroy (tears down infrastructure; needs auto_approve). Destructive arvan_k8s_delete kubectl delete -f a manifest or directory. Destructive arvan_live_delete_channel Delete a live channel by id. Destructive arvan_purge_cache Purge cached content for a domain. Destructive arvan_rebuild_server Rebuild a server from an image (destroys current root disk contents). Destructive arvan_s3_delete_bucket Delete an (empty) bucket. Destructive arvan_s3_delete_object Delete a single object. Destructive arvan_s3_delete_objects Delete multiple objects in one call. Destructive arvan_task_cancel Cancel a scheduled/running background task. Destructive arvan_vod_delete_audio Delete an audio item by id. Destructive arvan_vod_delete_channel Delete a VOD channel by id. Destructive arvan_vod_delete_file Delete an uploaded source file by id. Destructive arvan_vod_delete_profile Delete an encoding profile by id. Destructive arvan_vod_delete_subtitle Delete a subtitle by id. Destructive arvan_vod_delete_video Delete a VOD video by id. Destructive arvan_vod_delete_watermark Delete a watermark by id.
EXECUTE 35 tools
Execute arvan_ansible_playbook Run an Ansible playbook against a host (requires ansible-playbook). Execute arvan_git_checkout Check out a branch, tag, or commit. Execute arvan_git_clone Clone a repository to dest (defaults to a fresh temp directory). Execute arvan_git_pull Pull the latest changes for the current branch. Execute arvan_helm_install Install/upgrade a Helm chart. Execute arvan_iac_opentofu_validate Validate OpenTofu configuration (tofu validate). Execute arvan_iac_packer_validate Validate a Packer template (packer validate). Execute arvan_iac_terraform_apply Run terraform apply to create/update real ArvanCloud infrastructure. Execute arvan_iac_terraform_fmt Check (or apply, with write=True) Terraform formatting. Execute arvan_iac_terraform_init Run terraform init (downloads the arvancloud/arvan provider). Execute arvan_iac_terraform_plan Run terraform plan against the arvancloud/arvan provider. Execute arvan_iac_terraform_validate Validate Terraform configuration (optionally terraform init first). Execute arvan_iac_validate_kubernetes Validate Kubernetes manifests against the schema with kubeconform. Execute arvan_k8s_apply kubectl apply a manifest (inline YAML) or a directory of manifests. Execute arvan_kubectl Run an arbitrary kubectl command (e.g. ["get","pods","-o","wide"]). Execute arvan_net_http_check Make an HTTP(S) request and report status, timing, and key headers. Execute arvan_net_http_load_test Fire a quick concurrent load test and report latency percentiles. Execute arvan_net_ping ICMP ping a host (requires the system ping binary). Execute arvan_net_port_scan Scan a list of TCP ports on a host (defaults to common service ports). Execute arvan_net_traceroute Trace the network path to a host (requires traceroute). Execute arvan_notify_slack Post a message to a Slack incoming webhook. Execute arvan_notify_telegram Send a Telegram message via a bot. Execute arvan_notify_webhook POST a JSON payload (or {"text": ...}) to an arbitrary webhook. Execute arvan_provision_server arvan_provision_server Execute arvan_resize_server Change a server's plan/flavor (resize CPU & RAM). Execute arvan_security_grype Scan a container image or a directory for vulnerabilities with grype. Execute arvan_security_sast Static application security testing (SAST) with semgrep. Execute arvan_security_scan_image Scan a container image for vulnerabilities with Trivy (trivy image). Execute arvan_security_scan_vulnerabilities Scan a filesystem for vulns, secrets and misconfig with Trivy (trivy fs). Execute arvan_server_action Run a power/maintenance action on a server. Execute arvan_ssh_check_connection Verify SSH connectivity/auth to a server (useful after provisioning). Execute arvan_ssh_run arvan_ssh_run Execute arvan_ssh_run_script Run a multi-line script on a server over SSH (piped to bash -s). Execute arvan_trigger_cdn_app_webhook Trigger a CDN app's webhook action. Execute arvan_wait_for_server Poll a server until it becomes active (or the timeout elapses).
WRITE 67 tools
Write arvan_attach_floating_ip Attach a floating IP to a server/port. Write arvan_attach_network Attach a network to a server (optionally with a fixed IP). Write arvan_attach_security_group_to_server Attach a security group to a server. Write arvan_attach_tag Attach a tag to a resource (e.g. a server). Write arvan_attach_volume Attach a volume to a server. Write arvan_create_a_record Convenience: create an A record pointing name at one or more IPs. Write arvan_create_cdn_app Create a CDN app (edge application) for a domain. Write arvan_create_cname_record Convenience: create a CNAME record from name to target. Write arvan_create_dns_record arvan_create_dns_record Write arvan_create_domain Add a domain to the CDN / Cloud DNS (the "dns-service" onboarding call). Write arvan_create_firewall_rule arvan_create_firewall_rule Write arvan_create_floating_ip Allocate a new floating (public) IP address. Write arvan_create_log_forwarder Create a log forwarder (ship access logs to an external sink). Write arvan_create_metric_exporter Create a metric exporter for a domain. Write arvan_create_page_rule Create a page rule. Write arvan_create_private_network arvan_create_private_network Write arvan_create_ptr_record Create a reverse-DNS (PTR) record mapping an IP to a domain. Write arvan_create_rate_limit_rule Create a rate-limit rule. Write arvan_create_security_group Create a security group. Write arvan_create_security_rule arvan_create_security_rule Write arvan_create_server arvan_create_server Write arvan_create_ssh_key Register an SSH public key so it can be injected into servers at create. Write arvan_create_tag Create a resource tag. Write arvan_create_volume Create a block-storage volume. Write arvan_detach_floating_ip Detach a floating IP from the given port. Write arvan_detach_network Detach a network from a server. Write arvan_detach_security_group_from_server Detach a security group from a server. Write arvan_detach_tag Detach a tag from a resource. Write arvan_import_dns_zone Import DNS records from a BIND-style zone file. Write arvan_live_create_channel Create a live-streaming channel. Write arvan_live_update_channel Update a live channel with the given fields. Write arvan_notify_email Send an email via SMTP. Write arvan_rename_server Rename a cloud server. Write arvan_resize_server_disk Resize a server's root disk to the given size in GB. Write arvan_s3_copy_object Copy an object to another key/bucket. Write arvan_s3_create_bucket Create a bucket. acl is one of private, public-read, public-read-write. Write arvan_s3_enable_static_website Configure a bucket for static website hosting (optionally make it public). Write arvan_s3_put_bucket_policy Set a bucket's access policy (an S3 policy document). Write arvan_s3_put_object arvan_s3_put_object Write arvan_s3_set_bucket_acl Set a bucket ACL (private, public-read, public-read-write). Write arvan_s3_sync_local_dir Upload all files under a local directory to a bucket (recursive). Write arvan_security_generate_password Generate a cryptographically strong random password. Write arvan_security_generate_sbom Generate a Software Bill of Materials (SBOM) with syft. Write arvan_security_generate_ssh_keypair Generate an SSH keypair (ed25519 or rsa) for provisioning servers. Write arvan_set_dnssec Enable or disable DNSSEC for a domain. Write arvan_set_port_security Enable or disable port security on a network port. Write arvan_snapshot_volume Create a snapshot of a volume. Write arvan_ssh_upload_file Write content to a file on the server via SFTP. Write arvan_task_submit arvan_task_submit Write arvan_update_caching_settings Update caching settings for a domain. Write arvan_update_cdn_app Update a CDN app with the given fields. Write arvan_update_dns_record Update a DNS record (full replace). Write arvan_update_ssl_settings Update HTTPS/SSL settings for a domain. Write arvan_update_subnet Update a subnet (e.g. dns_servers, enable_dhcp, subnet_gateway). Write arvan_update_volume Update a volume's name and/or description. Write arvan_vod_create_audio Create an audio item in a channel. Write arvan_vod_create_channel Create a VOD channel. Write arvan_vod_create_domain Create/set the VOD user domain. Write arvan_vod_create_profile Create an encoding profile in a channel. Write arvan_vod_create_subtitle Create a subtitle for a video (e.g. {"lang": "fa", "file_id": "..."}). Write arvan_vod_create_video Create a video in a channel. Write arvan_vod_create_watermark Create a watermark in a channel (e.g. {"title":..., "file_id":...}). Write arvan_vod_update_audio Update an audio item with the given fields. Write arvan_vod_update_channel Update a VOD channel with the given fields. Write arvan_vod_update_profile Update an encoding profile with the given fields. Write arvan_vod_update_video Update a VOD video with the given fields. Write arvan_vod_update_watermark Update a watermark with the given fields.
READ 97 tools
Read arvan_account_details Get the current account/project details for Cloud Server. Read arvan_audit_log Return the most recent mutating tool calls (newest last). Read arvan_capabilities arvan_capabilities Read arvan_detach_volume Detach a volume from a server. Read arvan_docs_fetch Fetch an ArvanCloud documentation page and return it as plain text. Read arvan_docs_search Search the curated ArvanCloud documentation index for a query. Read arvan_docs_topics List curated ArvanCloud documentation topics and their URLs. Read arvan_doctor arvan_doctor Read arvan_find_tool Search this server's own tools by keyword (handy with 200+ tools). Read arvan_get_caching_settings Get caching settings for a domain. Read arvan_get_cdn_app Get a CDN app by id. Read arvan_get_dns_record Get a single DNS record by id. Read arvan_get_dnssec Get DNSSEC status (and DS records) for a domain. Read arvan_get_domain Get details and settings for a CDN domain. Read arvan_get_quotas Get resource quotas and current usage for a region. Read arvan_get_server Get details of a single cloud server by id. Read arvan_get_ssl_settings Get HTTPS/SSL settings for a domain. Read arvan_get_subnet Get a private-network subnet by id. Read arvan_get_volume Get a single block-storage volume by id. Read arvan_get_volume_limits Get block-storage volume limits/quota for a region. Read arvan_git_available Report whether the git binary is installed. Read arvan_git_diff Show the diff of unstaged (or, with staged, staged) changes. Read arvan_git_list_files List tracked files in a checkout. Read arvan_git_log Show recent commits (one line each). Read arvan_git_status Show the working-tree status of a checkout (porcelain). Read arvan_iac_available_tools Report which IaC validation tools are installed (and their paths). Read arvan_iac_checkov Scan IaC for misconfigurations & security issues with Checkov. Read arvan_iac_kube_linter Lint Kubernetes manifests for security/correctness with kube-linter. Read arvan_iac_lint_dockerfile Lint a Dockerfile with hadolint (reads the content from stdin). Read arvan_iac_lint_yaml Lint a YAML document with yamllint (reads the content from stdin). Read arvan_iac_terraform_cost Estimate Terraform cost with Infracost (infracost breakdown). Read arvan_iac_tflint Lint Terraform with tflint (best-practice and provider checks). Read arvan_iac_tfsec Scan Terraform for security issues with tfsec. Read arvan_iac_trivy_config Scan IaC/config for security issues with Trivy (trivy config). Read arvan_k8s_available_tools Report whether kubectl and helm are installed. Read arvan_k8s_get kubectl get resources (e.g. resource='pods'), default JSON output. Read arvan_list_cdn_apps List CDN apps configured for a domain. Read arvan_list_dns_records List DNS records for a domain (optionally filter by search/type). Read arvan_list_domains List CDN domains on the account (supports pagination & search). Read arvan_list_firewall_rules List firewall (WAF) rules for a domain. Read arvan_list_floating_ips List floating (public) IP addresses in a region. Read arvan_list_images arvan_list_images Read arvan_list_log_forwarders List log-forwarding destinations for a domain. Read arvan_list_metric_exporters List Prometheus-style metric exporters for a domain. Read arvan_list_networks List networks (public and private) available in a region. Read arvan_list_page_rules List page rules for a domain. Read arvan_list_plans List available server plans/flavors (sizes) and their pricing. Read arvan_list_ptr_records List reverse-DNS (PTR) records in a region. Read arvan_list_rate_limit_rules List rate-limit rules for a domain. Read arvan_list_regions List all ArvanCloud IaaS regions (datacenters) and their codes. Read arvan_list_security_groups List security groups (firewall groups) in a region. Read arvan_list_servers List cloud servers (VMs) in a region. Read arvan_list_ssh_keys List SSH keys registered in a region (for injecting into new servers). Read arvan_list_subnets List private-network subnets in a region. Read arvan_list_tags List resource tags in a region. Read arvan_list_volumes List block-storage volumes in a region. Read arvan_live_get_channel Get a live channel by id (includes push/pull URLs and stream keys). Read arvan_live_list_channels List live-streaming channels. Read arvan_live_list_inputs List the inputs/streams configured for a live channel. Read arvan_metrics Return server tool-call metrics (calls, errors, latency). Read arvan_net_dns_lookup Resolve a DNS record. Read arvan_net_my_public_ip Return this server's public IP address (via an external echo service). Read arvan_net_reverse_dns Reverse-resolve an IP address to a hostname (PTR). Read arvan_net_tcp_check Check whether a TCP port is open and measure connect latency. Read arvan_net_tls_cert Inspect the TLS certificate served by a host (issuer, SANs, expiry). Read arvan_net_whois WHOIS lookup for a domain or IP (requires the whois binary). Read arvan_request arvan_request Read arvan_s3_generate_presigned_url Generate a presigned URL for temporary access to an object. Read arvan_s3_get_bucket_policy Get a bucket's access policy (JSON). Read arvan_s3_get_object Download an object. Returns text, or base64 when as_base64 or binary. Read arvan_s3_head_object Get an object's metadata (size, type, etag) without downloading it. Read arvan_s3_list_buckets List all Object Storage buckets. Read arvan_s3_list_objects List objects in a bucket (optionally under a prefix). Read arvan_security_audit_security_groups Audit ArvanCloud security groups for risky, world-open ingress rules. Read arvan_security_available_tools Report which security scanners are installed (and their paths). Read arvan_security_http_headers Check a URL's HTTP security headers and grade them. Read arvan_security_scan_secrets Scan a directory/files for committed secrets with gitleaks. Read arvan_server_options Get available options for creating a server in a region. Read arvan_ssh_download_file Read a file from the server via SFTP (truncated to 256 KiB). Read arvan_task_list List background tasks and their status (most recent first). Read arvan_task_status Get a background task's full status, last result, and run history. Read arvan_toggle_dns_cloud Enable or disable cloud (proxy) for a DNS record. Read arvan_vod_get_audio Get an audio item by id. Read arvan_vod_get_channel Get a VOD channel by id. Read arvan_vod_get_domain Get the VOD user domain (the delivery domain for this account). Read arvan_vod_get_file Get an uploaded source file by id. Read arvan_vod_get_profile Get an encoding profile by id. Read arvan_vod_get_subtitle Get a subtitle by id. Read arvan_vod_get_video Get a VOD video by id. Read arvan_vod_get_watermark Get a watermark by id. Read arvan_vod_list_audios List audio tracks in a channel. Read arvan_vod_list_channels List VOD channels. Read arvan_vod_list_files List uploaded source files in a channel. Read arvan_vod_list_profiles List encoding profiles in a channel. Read arvan_vod_list_subtitles List subtitles for a video. Read arvan_vod_list_videos List videos in a channel. Read arvan_vod_list_watermarks List watermarks in a channel.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about ArvanCloud MCP Server

Can an AI agent delete data through the ArvanCloud MCP Server MCP server? +

Yes. The ArvanCloud MCP Server server exposes 33 destructive tools including arvan_delete_cdn_app, arvan_delete_dns_record, arvan_delete_domain. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ArvanCloud MCP Server? +

The ArvanCloud MCP Server server has 67 write tools including arvan_attach_floating_ip, arvan_attach_network, arvan_attach_security_group_to_server. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ArvanCloud MCP Server.

How many tools does the ArvanCloud MCP Server MCP server expose? +

232 tools across 4 categories: Destructive, Execute, Read, Write. 97 are read-only. 135 can modify, create, or delete data.

How do I enforce a policy on ArvanCloud MCP Server? +

Register the ArvanCloud MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ArvanCloud MCP Server tool call.

Deterministic rules across all 232 ArvanCloud MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ARVANCLOUD →

Instant setup, no code required.

232 ArvanCloud MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from ArvanCloud MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.