// SCAN REPORT

KVMFleet MCP Server

31 tools. 11 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

11 can modify or destroy data

20 read-only

31 tools total

Community server · catalogue entry verified 30/06/2026

How to control KVMFleet MCP Server ↓

TOOL MAP

What KVMFleet MCP Server exposes to your agents

Read (20) Write / Execute (9) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous KVMFleet MCP Server tools

Destructive · High revoke_access Revoking active JIT (Just-In-Time) access is an irreversible action that immediately terminates user permissions. Destructive · High end_console_session The tool forcibly terminates an active console session, which is an irreversible action. Execute · High power_action While the description mentions destructive actions, the tool's primary function is to execute power commands whose effects are contingent on the specific argument passed. Execute · High mount_iso Mounting an ISO as virtual media on a device triggers an external operation that changes the device's state (attaching virtual media).

11 of KVMFleet MCP Server's 31 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control KVMFleet MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and KVMFleet MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "end_console_session": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "acknowledge_alert": {
    "limits": [
      {
        "counter": "acknowledge_alert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_audit_chain_head": {
    "limits": [
      {
        "counter": "get_audit_chain_head_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register KVMFleet MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KVMFLEET →

Instant setup, no code required.

FULL CATALOGUE

All 31 KVMFleet MCP Server tools

DESTRUCTIVE 2 tools

Destructive end_console_session Forcibly end a console session — destructive. Destructive revoke_access Revoke a currently-active JIT access grant. Destructive —

EXECUTE 3 tools

Execute mount_iso Mount an ISO from the org library as virtual media on a device. Destructive — Execute power_action Run a power action on a device: on, off, off_hard, cycle, reboot. Subject to org_admin/operator role, policy e Execute unmount_iso Eject any virtual media currently mounted on the device. Idempotent.

WRITE 6 tools

Write acknowledge_alert Acknowledge a fired alert — marks it as seen without resolving the underlying condition. Write approve_access Approve a pending JIT access request. Subject to the 4-eyes rule on the server: the approver cannot be the req Write create_report_share Mint a time-limited, optionally IP-allowlisted auditor link to a compliance report for a framework + period; r Write deny_access Deny a pending JIT access request. Optional reason. Write request_access Open a JIT access request to a device. duration_minutes ∈ {15, 60, 240, 480}. Write resolve_alert Resolve a fired alert — marks the underlying condition as handled.

READ 20 tools

Read get_audit_chain_head Current audit-chain head: hash, depth, last-anchor information. Use to answer Read get_compliance_config Return the org Read get_compliance_score Return the machine-readable JSON compliance report for a framework (soc2, iso27001, nis2, dora, hipaa, pci_dss Read get_device_health Detailed health snapshot for a single device: temperature, uptime, agent version, last seen. Read get_device_metrics Return recent health metrics (CPU temp, uptime) as a time-series for one device over the last Read get_inclusion_proof Return a Merkle inclusion-proof bundle for the audit events matching the filter — a minimum-disclosure export Read get_power_state Return the last-known power state for one device (Redfish/IPMI/PDU-backed). Read-only. Read list_access_grants List JIT access grants for the org, filterable by status. Use Read list_alerts List alert history (active + recently fired). Use to answer Read list_audit_witnesses List the org Read list_devices List all KVM devices in the operator Read list_isos List ISOs in the org library — name, source URL, SHA-256, uploader. Read list_open_console_sessions List currently-open (unended) console sessions in the org. Read list_policies List policy-engine rules attached to the org (time-of-day, require_mfa, max_concurrent_sessions, approval_requ Read list_policy_evaluations List logged past policy evaluations (most recent first). Each row is one decision with its result and a single Read list_report_shares List existing auditor share-links for compliance reports (framework, period, expiry, revoked, access count, IP Read list_team List the org Read query_audit_log Recent audit events for the org, optionally filtered. Use to answer questions like Read render_compliance_report Render a compliance report for a framework over an explicit period, as json or csv, returned inline. PDF/HTML Read verify_audit_integrity Re-walk the per-org audit hash chain on the server and report whether it

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about KVMFleet MCP Server

Can an AI agent delete data through the KVMFleet MCP Server MCP server? +

Yes. The KVMFleet MCP Server server exposes 2 destructive tools including end_console_session, revoke_access. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through KVMFleet MCP Server? +

The KVMFleet MCP Server server has 6 write tools including acknowledge_alert, approve_access, create_report_share. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach KVMFleet MCP Server.

How many tools does the KVMFleet MCP Server MCP server expose? +

31 tools across 4 categories: Destructive, Execute, Read, Write. 20 are read-only. 11 can modify, create, or delete data.

How do I enforce a policy on KVMFleet MCP Server? +

Register the KVMFleet MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every KVMFleet MCP Server tool call.

Deterministic rules across all 31 KVMFleet MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KVMFLEET →

Instant setup, no code required.

31 KVMFleet MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.