// SCAN REPORT

OCI MCP Server

85 tools. 10 can modify or destroy data without limits.

10 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

10 can modify or destroy data

75 read-only

85 tools total

Community server · catalogue entry verified 29/06/2026

How to control OCI MCP Server ↓

TOOL MAP

What OCI MCP Server exposes to your agents

Read (75) Write / Execute (10) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous OCI MCP Server tools

Execute · High reset_db_node A 'reset' of a DB node typically triggers a restart or reinitialization of a database node in OCI, which constitutes executing an external operation affecting infrastructure. Execute · High start_db_node This tool executes an operation that starts a database node in Oracle Cloud Infrastructure. Execute · High start_db_system Starting a database system executes an operation with external effects (VM/service startup, resource allocation, potential billing impact). Execute · High start_instance This tool executes an action (starting a compute instance) that has real-world consequences in a cloud environment.

10 of OCI MCP Server's 85 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control OCI MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and OCI MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "set_oci_profile": {
    "limits": [
      {
        "counter": "set_oci_profile_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_alarm": {
    "limits": [
      {
        "counter": "get_alarm_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register OCI MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON OCI →

Instant setup, no code required.

FULL CATALOGUE

All 85 OCI MCP Server tools

EXECUTE 9 tools

Execute reboot_db_node reboot_db_node Execute reset_db_node reset_db_node Execute softreset_db_node softreset_db_node Execute start_db_node start_db_node Execute start_db_system start_db_system Execute start_instance start_instance Execute stop_db_node stop_db_node Execute stop_db_system stop_db_system Execute stop_instance stop_instance

WRITE 1 tools

Write set_oci_profile Set the active OCI profile to use for API calls.

READ 75 tools

Read get_alarm get_alarm Read get_alarm_history get_alarm_history Read get_autonomous_database get_autonomous_database Read get_boot_volume get_boot_volume Read get_bucket get_bucket Read get_budget get_budget Read get_cost_by_compartment get_cost_by_compartment Read get_cost_by_service get_cost_by_service Read get_cost_usage_summary get_cost_usage_summary Read get_current_oci_profile Get the currently active OCI profile. Read get_database get_database Read get_db_node get_db_node Read get_db_system get_db_system Read get_dynamic_group get_dynamic_group Read get_file_system get_file_system Read get_group get_group Read get_image get_image Read get_instance get_instance Read get_key get_key Read get_load_balancer get_load_balancer Read get_namespace get_namespace Read get_network_load_balancer get_network_load_balancer Read get_network_security_group get_network_security_group Read get_oke_cluster get_oke_cluster Read get_oke_cluster_kubeconfig get_oke_cluster_kubeconfig Read get_oke_node_pool get_oke_node_pool Read get_oke_work_request get_oke_work_request Read get_policy get_policy Read get_security_list get_security_list Read get_subnet get_subnet Read get_tenancy_info get_tenancy_info Read get_user get_user Read get_vault get_vault Read get_vcn get_vcn Read get_vnic get_vnic Read get_volume get_volume Read list_alarms list_alarms Read list_autonomous_databases list_autonomous_databases Read list_availability_domains list_availability_domains Read list_boot_volumes list_boot_volumes Read list_buckets list_buckets Read list_budgets list_budgets Read list_compartments list_compartments Read list_databases list_databases Read list_db_nodes list_db_nodes Read list_db_systems list_db_systems Read list_dynamic_groups list_dynamic_groups Read list_fault_domains list_fault_domains Read list_file_systems list_file_systems Read list_groups list_groups Read list_images list_images Read list_instances list_instances Read list_keys list_keys Read list_load_balancers list_load_balancers Read list_log_groups list_log_groups Read list_logs list_logs Read list_metrics list_metrics Read list_network_load_balancers list_network_load_balancers Read list_network_security_groups list_network_security_groups Read list_oci_profiles List all available OCI profiles from ~/.oci/config file. Read list_oke_clusters list_oke_clusters Read list_oke_node_pools list_oke_node_pools Read list_oke_work_requests list_oke_work_requests Read list_policies list_policies Read list_regions list_regions Read list_security_lists list_security_lists Read list_shapes list_shapes Read list_subnets list_subnets Read list_users list_users Read list_vaults list_vaults Read list_vcns list_vcns Read list_vnics list_vnics Read list_volumes list_volumes Read query_metric_data query_metric_data Read search_logs search_logs

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about OCI MCP Server

How do I prevent bulk modifications through OCI MCP Server? +

The OCI MCP Server server has 1 write tools including set_oci_profile. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach OCI MCP Server.

How many tools does the OCI MCP Server MCP server expose? +

85 tools across 4 categories: Destructive, Execute, Read, Write. 75 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on OCI MCP Server? +

Register the OCI MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every OCI MCP Server tool call.

Deterministic rules across all 85 OCI MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON OCI →

Instant setup, no code required.

85 OCI MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.