// SCAN REPORT

Lsp

29 tools. 5 can modify or destroy data without limits.

5 write tools that can modify data. Rate limits recommended.

Last updated: 28 Jun 2026

5 can modify or destroy data

24 read-only

29 tools total

Community server · catalogue entry verified 28/06/2026

How to control Lsp ↓

TOOL MAP

What Lsp exposes to your agents

Read (24) Write / Execute (5) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Lsp tools

Execute · High lsp_code_actions Although primarily a read-like operation (fetching suggestions), the tool's core capability is executing code transformations (refactoring actions) when apply=true. Execute · High lsp_start_server Starting a language server constitutes executing an external operation whose effects depend on which server is started and the workspace configuration. Execute · Medium lsp_stop_server Stopping a language server is a state-changing operation that terminates an external process. Write · High lsp_rename This tool creates or modifies code reversibly by renaming symbols (variables, functions, classes, etc.) across a codebase.

5 of Lsp's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Lsp

PolicyLayer is an MCP gateway — it sits between your AI agents and Lsp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "lsp_format_document": {
    "limits": [
      {
        "counter": "lsp_format_document_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "lsp_call_hierarchy": {
    "limits": [
      {
        "counter": "lsp_call_hierarchy_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Lsp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON LSP →

Instant setup, no code required.

FULL CATALOGUE

All 29 Lsp tools

EXECUTE 3 tools

Execute lsp_code_actions Get quick fixes and refactoring suggestions at a position. Use to auto-fix errors, organize imports, extract f Execute lsp_start_server Start a language server manually for a workspace. Usually not needed—servers auto-start when you use other LSP Execute lsp_stop_server Stop a running language server to free resources. Servers auto-stop after idle timeout, so manual stop is rare

WRITE 2 tools

Write lsp_format_document Format a file according to project style settings (prettier, eslint, etc.). Use after making edits to ensure c Write lsp_rename Rename a symbol across the entire codebase safely. Handles all references, imports, and re-exports. Use dry_ru

READ 24 tools

Read lsp_call_hierarchy Trace function calls: who calls this function (incoming) and what it calls (outgoing). Essential for understan Read lsp_completions Get intelligent code completion suggestions at a position. Returns available methods, properties, variables, a Read lsp_diagnostics Get compiler errors, warnings, and hints for a file. Use after making changes to check for type errors, missin Read lsp_document_highlights Find all occurrences of the symbol at a position within the same file, classified as text/read/write. Faster a Read lsp_document_symbols Get a structured outline of a file: all functions, classes, interfaces, and variables with their types and rel Read lsp_file_exports Get the public API surface of a file: top-level functions, classes, interfaces, and variables with their type Read lsp_file_imports Get all imports/dependencies of a file. Shows what modules this file depends on, including ES modules, CommonJ Read lsp_find_implementations Find all concrete implementations of an interface, abstract class, or abstract method. Use to understand how a Read lsp_find_references Find every usage of a symbol across the codebase. Use before renaming or deleting to understand impact. More c Read lsp_find_symbol Find a symbol by name alone—no file path or position needed. Returns the definition location plus full context Read lsp_folding_ranges Get the foldable regions of a file (functions, classes, blocks, imports, comments). Use as a quick structural Read lsp_goto_definition Find where a function, class, or variable is defined. More accurate than grep—handles aliases, re-exports, and Read lsp_goto_type_definition Find the type that defines a variable, parameter, or return value. Use when you have a variable and want to se Read lsp_hover Get the type signature and documentation for any symbol. Use to understand what a function accepts/returns or Read lsp_index_files Open a batch of files so language servers begin publishing diagnostics for them. Required warm-up before lsp_w Read lsp_inlay_hints Get inferred type annotations and parameter-name hints for a range of code. Reveals variable types, return typ Read lsp_related_files Find files connected to a given file: what it imports and what imports it. Use to understand a file\ Read lsp_selection_range Get the chain of semantic ranges enclosing a position — the expression, then its statement, then its block, up Read lsp_server_status Check which language servers are running and their state. Use to verify LSP is available before analysis or to Read lsp_signature_help Get parameter hints for a function call. Use when you need to know what arguments a function expects and their Read lsp_smart_search Get comprehensive information about a symbol in one call: type signature, definition location, all references, Read lsp_type_hierarchy Explore inheritance: find parent classes/interfaces (supertypes) and child classes/implementations (subtypes). Read lsp_workspace_diagnostics Get all errors and warnings across the entire project—no file path needed. Use during initial analysis to find Read lsp_workspace_symbols Find any function, class, interface, or type by name—no file path needed. Start here when exploring a codebase

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Lsp

How do I prevent bulk modifications through Lsp? +

The Lsp server has 2 write tools including lsp_format_document, lsp_rename. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Lsp.

How many tools does the Lsp MCP server expose? +

29 tools across 3 categories: Execute, Read, Write. 24 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on Lsp? +

Register the Lsp MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Lsp tool call.

Deterministic rules across all 29 Lsp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LSP →

Instant setup, no code required.

29 Lsp tools catalogued and risk-classified — across an index of 43,000+ MCP servers.