// SCAN REPORT

Coolify MCP Tools

98 tools. 62 can modify or destroy data without limits.

12 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

62 can modify or destroy data

36 read-only

98 tools total

Community server · catalogue entry verified 04/07/2026

How to control Coolify MCP Tools ↓

TOOL MAP

What Coolify MCP Tools exposes to your agents

Read (36) Write / Execute (50) Destructive / Financial (12)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Coolify MCP Tools tools

Destructive · High delete_application Deletion of applications cannot be undone and represents a loss of deployed services, configurations, and potentially associated data. Destructive · High delete_application_env This tool performs an irreversible deletion operation on application environment variables. Destructive · High delete_backup_execution The tool irreversibly removes backup execution records. Destructive · Critical delete_database This tool performs an irreversible destructive action that cannot be undone.

62 of Coolify MCP Tools's 98 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Coolify MCP Tools

PolicyLayer is an MCP gateway — it sits between your AI agents and Coolify MCP Tools, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_application": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "bulk_update_application_envs": {
    "limits": [
      {
        "counter": "bulk_update_application_envs_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_application": {
    "limits": [
      {
        "counter": "get_application_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Coolify MCP Tools — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON COOLIFY MCP TOOLS →

Instant setup, no code required.

FULL CATALOGUE

All 98 Coolify MCP Tools tools

DESTRUCTIVE 12 tools

EXECUTE 13 tools

Execute cancel_deployment Cancel a running deployment Execute deploy Deploy by tag or UUID (can deploy multiple resources) Execute deploy_application Deploy an application Execute execute_application_command Execute a command in application container Execute restart_application Restart an application Execute restart_database Restart a database Execute restart_service Restart a service Execute start_application Start an application Execute start_database Start a database Execute start_service Start a service Execute stop_application Stop an application Execute stop_database Stop a database Execute stop_service Stop a service

WRITE 37 tools

Write bulk_update_application_envs Bulk update application environment variables Write bulk_update_service_envs Bulk update service environment variables Write create_application_env Create application environment variable Write create_clickhouse_database Create a Clickhouse database Write create_database_backup Create a scheduled backup configuration for a database Write create_dockercompose_application Create application from Docker Compose Write create_dockerfile_application Create application from Dockerfile Write create_dockerimage_application Create application from Docker image Write create_dragonfly_database Create a Dragonfly database Write create_github_app Create a new GitHub App integration Write create_keydb_database Create a KeyDB database Write create_mariadb_database Create a MariaDB database Write create_mongodb_database Create a MongoDB database Write create_mysql_database Create a MySQL database Write create_postgres_database Create a PostgreSQL database Write create_private_deploykey_application Create application from private repository using deploy key Write create_private_ghapp_application Create application from private GitHub App repository Write create_private_key Create a new private key Write create_project Create a new project Write create_project_environment Create a new environment for a project Write create_public_application Create application from public git repository Write create_redis_database Create a Redis database Write create_server Create a new Coolify server Write create_service Create a one-click service (e.g., penpot, n8n, wordpress) Write create_service_env Create service environment variable Write disable_api Disable the Coolify API Write enable_api Enable the Coolify API Write update_application Update an application Write update_application_env Update application environment variable Write update_database Update a database Write update_database_backup Update a scheduled backup configuration Write update_github_app Update a GitHub App integration Write update_private_key Update a private key Write update_project Update a project Write update_server Update a Coolify server Write update_service Update a service Write update_service_env Update service environment variable

READ 36 tools

Read get_application Get application details Read get_application_logs Get application logs Read get_current_team Get currently authenticated team Read get_current_team_members Get members of currently authenticated team Read get_database Get database details Read get_deployment Get deployment details Read get_deployments_by_application Get all deployments for a specific application Read get_private_key Get private key details Read get_project Get project details Read get_project_environment Get project environment details Read get_server Get details about a specific Coolify server Read get_server_domains Get domains for a server Read get_server_resources Get resources running on a server Read get_service Get service details Read get_team Get team details Read get_team_members Get team members Read get_version Get Coolify version Read healthcheck Check Coolify API health Read list_application_envs List application environment variables Read list_applications List all applications Read list_backup_executions List backup executions for a scheduled backup Read list_database_backups List scheduled backups for a database Read list_databases List all databases Read list_deployments List currently running deployments Read list_github_app_branches List branches for a repository accessible by a GitHub App Read list_github_app_repositories List repositories accessible by a GitHub App Read list_github_apps List all GitHub Apps Read list_private_keys List all private keys Read list_project_environments List all environments for a project Read list_projects List all Coolify projects Read list_resources List all resources Read list_servers List all Coolify servers Read list_service_envs List service environment variables Read list_services List all one-click services Read list_teams List all teams Read validate_server Validate a server connection

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Coolify MCP Tools

Can an AI agent delete data through the Coolify MCP Tools MCP server? +

Yes. The Coolify MCP Tools server exposes 12 destructive tools including delete_application, delete_application_env, delete_backup_execution. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Coolify MCP Tools? +

The Coolify MCP Tools server has 37 write tools including bulk_update_application_envs, bulk_update_service_envs, create_application_env. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Coolify MCP Tools.

How many tools does the Coolify MCP Tools MCP server expose? +

98 tools across 4 categories: Destructive, Execute, Read, Write. 36 are read-only. 62 can modify, create, or delete data.

How do I enforce a policy on Coolify MCP Tools? +

Register the Coolify MCP Tools MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Coolify MCP Tools tool call.

Deterministic rules across all 98 Coolify MCP Tools tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON COOLIFY MCP TOOLS →

Instant setup, no code required.

98 Coolify MCP Tools tools catalogued and risk-classified — across an index of 43,000+ MCP servers.