// SCAN REPORT

microCMS MCP Server

14 tools. 5 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

5 can modify or destroy data

9 read-only

14 tools total

Community server · catalogue entry verified 11/06/2026

How to control microCMS MCP Server ↓

TOOL MAP

What microCMS MCP Server exposes to your agents

Read (9) Write / Execute (3) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous microCMS MCP Server tools

Destructive · Critical microcms_delete_content This tool performs an irreversible deletion operation on content within a CMS system. Destructive · High microcms_delete_media This tool performs irreversible deletion of media assets in a CMS. Write · Medium microcms_patch_content_created_by The tool performs a reversible modification (patch operation) of content metadata rather than destructive deletion or code execution. Write · Medium microcms_patch_content_status This tool modifies the publication status of content, which is a reversible state change.

5 of microCMS MCP Server's 14 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control microCMS MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and microCMS MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "microcms_delete_content": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "microcms_patch_content_created_by": {
    "limits": [
      {
        "counter": "microcms_patch_content_created_by_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "microcms_get_api_info": {
    "limits": [
      {
        "counter": "microcms_get_api_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register microCMS MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MICROCMS →

Free to start. No card required.

FULL CATALOGUE

All 14 microCMS MCP Server tools

DESTRUCTIVE 2 tools

Destructive microcms_delete_content Delete content from microCMS Destructive microcms_delete_media Delete media files from microCMS (Management API). Supports deletion of both images and files. Requires media

WRITE 3 tools

Write microcms_patch_content_created_by Change content creator in microCMS (Management API). Updates the createdBy field of a content item to a specif Write microcms_patch_content_status Change content publication status in microCMS (Management API). Can change status between PUBLISH (published) Write microcms_upload_media Upload media files to microCMS using JS SDK (Management API). Supports two methods: 1) Upload file data (base6

READ 9 tools

Read microcms_get_api_info Get API schema information from microCMS Management API. In relation and relationList field, you can get its s Read microcms_get_api_list Get list of all available APIs (endpoints) from microCMS Management API. Returns API name, endpoint, and type Read microcms_get_content Get a specific content from microCMS Read microcms_get_content_meta Get a specific content with metadata from microCMS Management API. IMPORTANT: Use this tool ONLY when the user Read microcms_get_list Get a list of contents from microCMS Read microcms_get_list_meta Get a list of contents with metadata from microCMS Management API. IMPORTANT: Use this tool ONLY when the user Read microcms_get_media Get media files from microCMS (Management API). Returns media information including URLs, dimensions for image Read microcms_get_member Get a specific member from microCMS Management API. Returns member information including ID, name, email, and Read microcms_get_services Get list of configured microCMS services and their available APIs (endpoints). Use this tool first to discover

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about microCMS MCP Server

Can an AI agent delete data through the microCMS MCP Server MCP server? +

Yes. The microCMS MCP Server server exposes 2 destructive tools including microcms_delete_content, microcms_delete_media. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through microCMS MCP Server? +

The microCMS MCP Server server has 3 write tools including microcms_patch_content_created_by, microcms_patch_content_status, microcms_upload_media. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach microCMS MCP Server.

How many tools does the microCMS MCP Server MCP server expose? +

14 tools across 3 categories: Destructive, Read, Write. 9 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on microCMS MCP Server? +

Register the microCMS MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every microCMS MCP Server tool call.

Deterministic rules across all 14 microCMS MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MICROCMS →

Free to start. No card required.

14 microCMS MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.