1Panel MCP Server

286 tools. 162 can modify or destroy data without limits.

38 destructive tools with no built-in limits. Policy required.

Last updated:

162 can modify or destroy data
124 read-only
286 tools total

Community server · catalogue entry checked 03/07/2026

How to control 1Panel MCP Server ↓

What 1Panel MCP Server exposes to your agents

Read (124) Write / Execute (124) Destructive / Financial (38)
Critical Risk

The most dangerous 1Panel MCP Server tools

162 of 1Panel MCP Server's 286 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control 1Panel MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and 1Panel MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "clean_compose_log": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "apply_ssl": {
    "limits": [
      {
        "counter": "apply_ssl_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "check_backup_account": {
    "limits": [
      {
        "counter": "check_backup_account_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register 1Panel MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON 1PANEL →

Instant setup, no code required.

All 286 1Panel MCP Server tools

DESTRUCTIVE 38 tools
Destructive clean_compose_log Clean compose log Destructive clean_container_log Clean container log Destructive clean_monitor_data Clean monitor data Destructive clear_recycle_bin Clear recycle bin Destructive delete_ai_agent Delete AI agent (XPack) Destructive delete_ai_agent_account Delete AI agent account (XPack) Destructive delete_backup Delete backup Destructive delete_backup_account Delete backup account Destructive delete_certificate Delete SSL certificate Destructive delete_clam_config Delete ClamAV config Destructive delete_cronjob Delete cronjob Destructive delete_database Delete database Destructive delete_file Delete file or directory Destructive delete_firewall_rule Delete firewall rule Destructive delete_ftp_user Delete FTP user Destructive delete_host Delete host Destructive delete_host_group Delete host group Destructive delete_host_ssh_key Delete host SSH key Destructive delete_mcp_server Delete MCP server (XPack) Destructive delete_ollama_model Delete Ollama model (XPack) Destructive delete_snapshot Delete system snapshot Destructive delete_website Delete website Destructive delete_website_domain Remove domain from website Destructive partition_disk Partition disk Destructive prune_containers Prune containers Destructive recover_snapshot Recover from snapshot Destructive recreate_snapshot Recreate snapshot Destructive remove_compose Remove compose Destructive remove_container Remove container Destructive remove_image Remove image Destructive remove_network Remove network Destructive remove_volume Remove volume Destructive reset_ai_agent_token Reset AI agent token (XPack) Destructive restore_backup Restore backup Destructive uninstall_app Uninstall app Destructive uninstall_environment Uninstall environment Destructive uninstall_php_extension Uninstall PHP extension Destructive unmount_disk Unmount disk
EXECUTE 36 tools
Execute build_image Build image Execute build_openresty Build OpenResty (XPack) Execute close_ollama_model Close Ollama model connection (XPack) Execute create_container Create container Execute create_cronjob Create cronjob Execute create_ollama_model Create Ollama model (XPack) Execute exec_command Execute command Execute generate_host_ssh_key Generate host SSH key Execute install_app Install app Execute install_environment Install environment Execute install_php_extension Install PHP extension Execute load_image Load image Execute load_ollama_model Load Ollama model (XPack) Execute mount_disk Mount disk Execute operate_fail2ban Operate Fail2ban (start/stop/restart) Execute operate_fail2ban_ssh Operate Fail2ban SSH (start/stop/restart) Execute operate_ftp Operate FTP (start/stop/restart) Execute operate_mcp_server Operate MCP server (XPack) Execute operate_node_module Operate Node module (XPack) Execute pause_container Pause container Execute pull_image Pull image Execute push_image Push image Execute resolve_ssl Resolve SSL certificate Execute restart_compose Restart compose Execute restart_container Restart container Execute scan_clam Scan with ClamAV Execute start_compose Start compose Execute start_container Start container Execute stop_compose Stop compose Execute stop_container Stop container Execute test_compose Test compose Execute test_host_connection Test host connection Execute test_host_connection_by_info Test host connection by info Execute unpause_container Unpause container Execute update_php_version Update PHP version Execute upgrade_container Upgrade container
WRITE 88 tools
Write apply_ssl Apply SSL to website Write bind_mcp_domain Bind MCP domain (XPack) Write chown_file Change file owner Write commit_container Commit container Write compress_files Compress files/directories Write create_ai_agent Create AI agent (XPack) Write create_ai_agent_account Create AI agent account (XPack) Write create_backup Create backup Write create_backup_account Create backup account Write create_certificate Create SSL certificate Write create_clam_config Create ClamAV config Write create_compose Create compose Write create_database Create database Write create_dir Create directory Write create_file Create empty file Write create_firewall_rule Create firewall rule Write create_ftp_user Create FTP user Write create_host Create host Write create_host_group Create host group Write create_mcp_server Create MCP server (XPack) Write create_network Create network Write create_snapshot Create system snapshot Write create_volume Create volume Write create_website Create website Write create_website_domain Add domain to website Write decompress_file Decompress archive Write import_snapshot Import system snapshot Write move_file Move file/directory Write mysql_bind_user MySQL: Bind/create user Write mysql_change_password MySQL: Change user password Write mysql_update_remote_access MySQL: Update remote access Write mysql_update_variables MySQL: Update variables Write obtain_ssl Obtain SSL certificate (Let Write postgresql_bind_user PostgreSQL: Bind/create user Write postgresql_change_password PostgreSQL: Change password Write postgresql_change_privileges PostgreSQL: Change privileges Write redis_change_password Redis: Change password Write redis_update_conf Redis: Update configuration Write redis_update_persistence_conf Redis: Update persistence Write reduce_recycle_bin Restore file from recycle bin Write rename_container Rename container Write rename_file Rename file/directory Write save_file Save file content Write save_image Save image Write tag_image Tag image Write update_ai_agent Update AI agent (XPack) Write update_ai_agent_account Update AI agent account (XPack) Write update_ai_agent_browser_config Update AI agent browser config (XPack) Write update_ai_agent_discord_config Update AI agent Discord config (XPack) Write update_ai_agent_feishu_config Update AI agent Feishu config (XPack) Write update_ai_agent_model Update AI agent model config (XPack) Write update_ai_agent_telegram_config Update AI agent Telegram config (XPack) Write update_app Update app Write update_backup_account Update backup account Write update_clam_config Update ClamAV config Write update_clam_file Update ClamAV file config Write update_clam_status Update ClamAV status Write update_compose Update compose Write update_container Update container Write update_dashboard_memo Update dashboard memo Write update_device Update device configuration Write update_device_by_file Update device configuration by file Write update_device_hosts Update device hosts Write update_device_password Update device password Write update_device_swap Update device swap Write update_fail2ban_conf Update Fail2ban configuration Write update_fail2ban_conf_by_file Update Fail2ban configuration by file content Write update_ftp_user Update FTP user Write update_host Update host Write update_host_group Update host group Write update_host_group_by_id Update host group Write update_host_ssh_key Update host SSH key Write update_https Update HTTPS configuration Write update_mcp_domain Update MCP domain (XPack) Write update_mcp_server Update MCP server (XPack) Write update_monitor_setting Update monitor setting Write update_nginx_conf Update Nginx configuration Write update_openresty_by_file Update OpenResty config by file (XPack) Write update_openresty_conf Update OpenResty configuration (XPack) Write update_openresty_module Update OpenResty module (XPack) Write update_php_conf Update PHP config Write update_php_conf_file Update PHP config file Write update_settings Update settings Write update_snapshot_description Update snapshot description Write update_ssh_config Update SSH config Write update_website Update website Write update_website_domain Update website domain Write upload_ssl Upload SSL certificate
READ 124 tools
Read check_backup_account Check backup account Read check_device_dns Check device DNS Read check_file Check if file exists Read chmod_file Change file permissions Read clean_clam_records Clean ClamAV records Read download_file Get download link Read get_ai_agent_browser_config Get AI agent browser config (XPack) Read get_ai_agent_discord_config Get AI agent Discord config (XPack) Read get_ai_agent_feishu_config Get AI agent Feishu config (XPack) Read get_ai_agent_telegram_config Get AI agent Telegram config (XPack) Read get_backup_account_client_info Get backup account client info Read get_backup_account_options Get backup account options Read get_certificate Get SSL certificate details Read get_clam_base_info Get ClamAV base info Read get_clam_file Get ClamAV file config Read get_clam_records Get ClamAV scan records Read get_compose_env Get compose environment Read get_container Get container info Read get_container_logs Get container logs Read get_container_stats Get container stats Read get_container_status Get containers status Read get_container_users Get container users Read get_dashboard_base_info Get dashboard base info Read get_dashboard_current_info Get dashboard current info Read get_dashboard_memo Get dashboard memo Read get_database Get database details Read get_device_base_info Get device base info Read get_disk_full_info Get full disk information Read get_executing_task_count Get executing task count Read get_fail2ban_base_info Get Fail2ban base info Read get_fail2ban_conf Get Fail2ban configuration Read get_file_content Get file content Read get_file_size Get file size Read get_file_tree Get directory tree Read get_ftp_base_info Get FTP base info Read get_ftp_logs Get FTP logs Read get_gpu_info Get GPU/XPU info (XPack) Read get_gpu_monitor_data Get GPU monitor data (XPack) Read get_host Get host Read get_host_ssh_conf Get host SSH config Read get_host_ssh_key Get host SSH key Read get_host_ssh_logs Get host SSH logs Read get_host_tree Get host tree Read get_https Get HTTPS configuration Read get_mcp_domain Get MCP domain (XPack) Read get_monitor_data Get monitor data Read get_monitor_setting Get monitor setting Read get_nginx_conf Get Nginx configuration Read get_node_modules Get Node modules (XPack) Read get_node_package_scripts Get Node package scripts (XPack) Read get_openresty_conf Get OpenResty configuration (XPack) Read get_openresty_modules Get OpenResty modules (XPack) Read get_openresty_partial_conf Get OpenResty partial config (XPack) Read get_openresty_status Get OpenResty status (XPack) Read get_php_conf Get PHP config Read get_php_conf_file Get PHP config file Read get_recycle_bin_status Get recycle bin status Read get_settings Get settings Read get_ssh_config Get SSH config Read get_system_info Get system info Read get_system_monitor Get system monitor Read get_task_logs Get task logs Read get_website Get website details Read get_website_ssl Get website SSL certificate Read inspect_container Inspect container Read kill_container Kill container Read kill_process Kill process Read list_ai_agent_accounts List AI agent accounts (XPack) Read list_ai_agents List AI agents (XPack) Read list_all_images List all Docker images Read list_app_store List app store Read list_backup_account_files List files in backup account Read list_backup_accounts List backup accounts Read list_backups List backups Read list_certificates List SSL certificates Read list_clam_configs List ClamAV configs Read list_composes List compose projects Read list_containers List Docker containers Read list_containers_by_image List containers by image Read list_containers_simple List containers (simple) Read list_cronjobs List cronjobs Read list_databases List databases Read list_disks List disks Read list_environments List environments Read list_files List files in a directory Read list_firewall_rules List firewall rules Read list_ftp_users List FTP users Read list_host_groups List host groups Read list_hosts List hosts Read list_images List Docker images Read list_installed_apps List installed apps Read list_mcp_servers List MCP servers (XPack) Read list_networks List networks Read list_ollama_models List Ollama models (XPack) Read list_operation_logs List operation logs Read list_php_extensions List PHP extensions Read list_php_runtimes List PHP runtimes Read list_processes List processes Read list_recycle_bin List recycle bin files Read list_snapshots List system snapshots Read list_system_logs List system logs Read list_volumes List volumes Read list_website_domains List website domains Read list_websites List websites Read load_snapshot Load snapshot data Read mysql_change_access MySQL: Change remote access Read mysql_get_info MySQL: Get server info Read mysql_get_remote_access MySQL: Get remote access config Read mysql_get_status MySQL: Get server status Read mysql_get_variables MySQL: Get variables Read postgresql_list_databases PostgreSQL: List databases Read recreate_ollama_model Recreate Ollama model (XPack) Read redis_get_conf Redis: Get configuration Read redis_get_persistence_conf Redis: Get persistence config Read redis_get_status Redis: Get status Read renew_ssl Renew SSL certificate Read search_fail2ban_banned_ips Search banned IPs in Fail2ban Read search_files Search files with keyword Read search_images Search images Read sync_ftp_users Sync FTP users Read sync_host_ssh_key Sync host SSH key Read sync_ollama_models Sync Ollama models (XPack) Read verify_ai_agent_account Verify AI agent account (XPack) Read wget_file Download from URL

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about 1Panel MCP Server

Can an AI agent delete data through the 1Panel MCP Server MCP server? +

Yes. The 1Panel MCP Server server exposes 38 destructive tools including clean_compose_log, clean_container_log, clean_monitor_data. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through 1Panel MCP Server? +

The 1Panel MCP Server server has 88 write tools including apply_ssl, bind_mcp_domain, chown_file. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach 1Panel MCP Server.

How many tools does the 1Panel MCP Server MCP server expose? +

286 tools across 4 categories: Destructive, Execute, Read, Write. 124 are read-only. 162 can modify, create, or delete data.

How do I enforce a policy on 1Panel MCP Server? +

Register the 1Panel MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every 1Panel MCP Server tool call.

Deterministic rules across all 286 1Panel MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

286 1Panel MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from 1Panel MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.