// SCAN REPORT

Ppdm

25 tools. 7 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

7 can modify or destroy data

18 read-only

25 tools total

Community server · catalogue entry verified 02/07/2026

How to control Ppdm ↓

TOOL MAP

What Ppdm exposes to your agents

Read (18) Write / Execute (5) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ppdm tools

Destructive · High bulk_cancel_jobs Cancelling running backup jobs is an irreversible action — once a backup job is cancelled, the in-progress backup data is lost and the job cannot be resumed. Destructive · High cancel_activity Cancelling a running backup activity is an irreversible action — once cancelled, the in-progress backup job is terminated and cannot be resumed. Execute · High bulk_trigger_backup This tool executes backup operations across multiple assets simultaneously. Execute · High nw_trigger_save This tool executes an external operation (triggering a backup job) with side effects that cannot be easily predicted or reversed without additional operations.

7 of Ppdm's 25 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ppdm

PolicyLayer is an MCP gateway — it sits between your AI agents and Ppdm, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "bulk_cancel_jobs": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "dd_create_storage_unit": {
    "limits": [
      {
        "counter": "dd_create_storage_unit_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "dd_ddboost_status": {
    "limits": [
      {
        "counter": "dd_ddboost_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ppdm — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PPDM →

Instant setup, no code required.

FULL CATALOGUE

All 25 Ppdm tools

DESTRUCTIVE 2 tools

Destructive bulk_cancel_jobs Cancel all currently running PPDM jobs, optionally filtered by asset type. Destructive cancel_activity Cancel a running PPDM activity.

EXECUTE 4 tools

Execute bulk_trigger_backup Trigger on-demand backup for all assets matching an optional filter under a named policy. Execute nw_trigger_save Trigger an on-demand backup for a NetWorker client. Execute restore_latest Restore an asset to its original location from the most recent copy — single call, no manual copy browsing nee Execute trigger_backup Trigger an on-demand backup for an asset using a named protection policy.

WRITE 1 tools

Write dd_create_storage_unit Create a new DDBoost storage unit on Data Domain.

READ 18 tools

Read dd_ddboost_status Check whether DDBoost is enabled on Data Domain and list authorized DDBoost users. Read dd_filesystem_stats Get Data Domain filesystem capacity — total, used, available in GiB and used percentage. Use to check if DD is Read dd_list_storage_units List DDBoost storage units on Data Domain — name, assigned user, quota, and status. Read dd_list_users List local users configured on Data Domain. Read dd_system_info Get Data Domain system information — model, version, serial number, and uptime. Read get_activity Get full detail for a specific PPDM activity by ID. Read get_sla_compliance Report SLA compliance — which assets have not been backed up within the required window. Read get_system_health Get an overall health summary for the PPDM environment. Read list_assets List protected assets in PPDM. Filter by name or type. Read list_failed_jobs List failed backup jobs from PPDM. Returns asset name, type, error, and start time. Read list_policies List protection policies configured in PPDM. Read list_running_jobs List currently running backup jobs in PPDM. Read nw_get_client Get detailed information for a specific NetWorker client by ID. Read nw_list_clients List NetWorker clients registered on the server. Read nw_list_failed_savesets List NetWorker savesets that did not complete successfully. Read nw_list_policies List NetWorker protection groups (policies). Read nw_list_savesets List NetWorker savesets (backup copies). Filter by client name. Read poll_until_complete Poll a PPDM activity until it reaches a terminal state (SUCCEEDED, FAILED, CANCELED). Returns the final activi

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ppdm

Can an AI agent delete data through the Ppdm MCP server? +

Yes. The Ppdm server exposes 2 destructive tools including bulk_cancel_jobs, cancel_activity. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ppdm? +

The Ppdm server has 1 write tools including dd_create_storage_unit. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ppdm.

How many tools does the Ppdm MCP server expose? +

25 tools across 4 categories: Destructive, Execute, Read, Write. 18 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Ppdm? +

Register the Ppdm MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ppdm tool call.

Deterministic rules across all 25 Ppdm tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PPDM →

Instant setup, no code required.

25 Ppdm tools catalogued and risk-classified — across an index of 43,000+ MCP servers.