// SCAN REPORT

ItchWHMMCP

43 tools. 10 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

10 can modify or destroy data

33 read-only

43 tools total

Community server · catalogue entry verified 03/07/2026

How to control ItchWHMMCP ↓

TOOL MAP

What ItchWHMMCP exposes to your agents

Read (33) Write / Execute (7) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous ItchWHMMCP tools

Destructive · High csf_remove_ip Removing an IP from CSF firewall lists is an irreversible action (without re-adding it manually) that directly affects server security posture. Destructive · Critical whm_terminate_account This tool irreversibly deletes an entire cPanel account and all associated data, which cannot be undone. Destructive · High whm_suspend_account Suspending a cPanel account disables all associated services (login, web, email) for the account holder. Execute · High whm_restart_service Restarting services is an execute action because it triggers external system operations with real-world consequences.

10 of ItchWHMMCP's 43 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ItchWHMMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and ItchWHMMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "csf_remove_ip": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "cpanel_email_create": {
    "limits": [
      {
        "counter": "cpanel_email_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "cpanel_bandwidth_usage": {
    "limits": [
      {
        "counter": "cpanel_bandwidth_usage_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register ItchWHMMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ITCHWHMMCP →

Instant setup, no code required.

FULL CATALOGUE

All 43 ItchWHMMCP tools

DESTRUCTIVE 3 tools

Destructive csf_remove_ip Remove an IP address from CSF allow, deny, and temporary lists. Confirm with the user before using. Destructive whm_suspend_account Suspend a cPanel account (disables login, web, email) Destructive whm_terminate_account ⚠️ PERMANENTLY DELETE a cPanel account and all its data

EXECUTE 2 tools

Execute csf_deny_ip Deny/block an IP address in CSF. Confirm with the user before using. Execute whm_restart_service Restart a specific service on the WHM server (apache, mysql, exim, etc.)

WRITE 5 tools

Write cpanel_email_create Create a new email account for a cPanel user Write whm_change_password Change password for a cPanel account Write whm_cphulk_unblock_ip Remove cPHulk login history blocks for an IP address Write whm_create_account Create a new cPanel hosting account on the WHM server Write whm_unsuspend_account Unsuspend/reactivate a suspended cPanel account

READ 33 tools

Read cpanel_bandwidth_usage Get bandwidth usage stats for a specific cPanel account Read cpanel_cron_list List all cron jobs configured for a cPanel account Read cpanel_disk_usage Get disk usage breakdown for a specific cPanel account Read cpanel_dns_records Get DNS zone records for a domain via cPanel UAPI Read cpanel_email_list List all email accounts for a cPanel user Read cpanel_forwarders_list List all email forwarders for a cPanel user Read cpanel_mysql_list List MySQL databases and users for a cPanel account Read cpanel_ssl_check Check SSL certificate status and expiry for a cPanel account Read cpanel_subdomains_list List all subdomains and addon domains for a cPanel account Read csf_allow_ip Allow an IP address in CSF. Confirm with the user before using. Read csf_check_ip SSH read-only CSF diagnostic: search CSF rules for an IP address Read csf_status SSH read-only CSF diagnostic: show CSF version/status and firewall rules summary Read list_accounts List all configured WHM/cPanel server accounts available in this MCP Read server_resource_snapshot SSH read-only diagnostic: uptime, memory, disk, and top CPU processes Read server_top_processes SSH read-only diagnostic: show top processes by CPU or memory Read whm_account_summary Get detailed summary for a specific cPanel account (disk, bandwidth, emails, DBs) Read whm_backup_list List available backups on the WHM server Read whm_bandwidth_usage Get bandwidth usage statistics for all accounts or a specific account Read whm_cphulk_brutes List cPHulk brute force attack entries Read whm_cphulk_excessive_brutes List cPHulk excessive brute force attack entries Read whm_cphulk_failed_logins List recent cPHulk failed login entries Read whm_cphulk_user_brutes List cPHulk brute force entries grouped by target user Read whm_disk_usage Get disk usage breakdown across all accounts on the server Read whm_dns_list_zones List all DNS zones managed by this WHM server Read whm_dns_zone_records Get all DNS records for a specific zone/domain Read whm_list_accounts List all cPanel accounts on this WHM server with disk usage, domain, status Read whm_list_ips List all IP addresses on the server and their assignments Read whm_list_packages List all hosting packages/plans configured on the WHM server Read whm_list_services Check status of all WHM services (Apache, MySQL, cPanel, SMTP, etc.) Read whm_mysql_list_dbs List all MySQL databases on the server across all accounts Read whm_server_info Get WHM server information: hostname, OS, cPanel version, load, uptime Read whm_server_load Get real-time server load averages, memory usage, CPU, swap Read whm_ssl_list List all SSL certificates installed on the server

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about ItchWHMMCP

Can an AI agent delete data through the ItchWHM MCP server? +

Yes. The ItchWHMMCP server exposes 3 destructive tools including csf_remove_ip, whm_suspend_account, whm_terminate_account. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ItchWHMMCP? +

The ItchWHMMCP server has 5 write tools including cpanel_email_create, whm_change_password, whm_cphulk_unblock_ip. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ItchWHMMCP.

How many tools does the ItchWHM MCP server expose? +

43 tools across 4 categories: Destructive, Execute, Read, Write. 33 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on ItchWHMMCP? +

Register the ItchWHM MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ItchWHMMCP tool call.

Deterministic rules across all 43 ItchWHMMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ITCHWHMMCP →

Instant setup, no code required.

43 ItchWHMMCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.