// SCAN REPORT

CloudStack MCP Server

442 tools. 317 can modify or destroy data without limits.

77 destructive tools with no built-in limits. Policy required.

Last updated:

317 can modify or destroy data
125 read-only
442 tools total

Community server · catalogue entry verified 03/07/2026

How to control CloudStack MCP Server ↓

TOOL MAP

What CloudStack MCP Server exposes to your agents

Read (125) Write / Execute (240) Destructive / Financial (77)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous CloudStack MCP Server tools

Destructive · High delete_account This tool permanently removes a CloudStack account, which is an irreversible destructive operation affecting all associated resources, users, and configurations. Destructive · High delete_account_from_project This tool performs an irreversible action that removes an account's membership and associated permissions from a project. Destructive · High delete_alerts This tool permanently removes system alerts, which cannot be undone. Destructive · High delete_application_load_balancer This tool deletes an application load balancer, which is a destructive action that cannot be undone.

317 of CloudStack MCP Server's 442 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control CloudStack MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and CloudStack MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "cancel_host_maintenance": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "activate_project": {
    "limits": [
      {
        "counter": "activate_project_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "check_volume": {
    "limits": [
      {
        "counter": "check_volume_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register CloudStack MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON CLOUDSTACK →

Instant setup, no code required.

FULL CATALOGUE

All 442 CloudStack MCP Server tools

DESTRUCTIVE 77 tools
Destructive cancel_host_maintenance Cancel host maintenance mode Destructive delete_account Delete a CloudStack account Destructive delete_account_from_project Remove an account from a project Destructive delete_alerts Delete system alerts Destructive delete_application_load_balancer Delete application load balancer Destructive delete_bgp_peer Delete BGP peer Destructive delete_customer_gateway Delete a customer gateway Destructive delete_dhcp_option Delete a DHCP option Destructive delete_disk_offering Delete disk offering Destructive delete_domain Delete a domain Destructive delete_egress_firewall_rule Delete an egress firewall rule Destructive delete_firewall_rule Delete firewall rule Destructive delete_global_load_balancer Delete global load balancer rule Destructive delete_host Delete hypervisor host Destructive delete_image_store Delete an image store backend Destructive delete_ip_forwarding_rule Delete an IP forwarding rule Destructive delete_ipv4_subnet_for_guest_network Delete IPv4 subnet for guest network Destructive delete_ipv4_subnet_for_zone Delete IPv4 subnet for zone Destructive delete_ipv6_firewall_rule Delete IPv6 firewall rule Destructive delete_iso Delete an ISO Destructive delete_kubernetes_cluster Delete an existing Kubernetes cluster Destructive delete_kubernetes_supported_version Remove a previously added Kubernetes version Destructive delete_lb_health_check_policy Delete load balancer health check policy Destructive delete_lb_stickiness_policy Delete load balancer stickiness policy Destructive delete_load_balancer_rule Delete a load balancer rule Destructive delete_network Delete a network Destructive delete_network_acl Delete network ACL rule Destructive delete_network_acl_list Delete a Network ACL list Destructive delete_network_device Delete a network device Destructive delete_network_offering Delete a network offering Destructive delete_network_service_provider Delete a network service provider Destructive delete_physical_network Delete a physical network Destructive delete_pod Delete a pod Destructive delete_port_forwarding_rule Delete port forwarding rule Destructive delete_private_gateway Delete a private gateway Destructive delete_project Delete a project and its resources Destructive delete_remote_access_vpn Delete Remote Access VPN Destructive delete_role Delete a role Destructive delete_routing_firewall_rule Delete IPv4 routing firewall rule Destructive delete_security_group Delete a security group Destructive delete_service_offering Delete a service offering in CloudStack Destructive delete_snapshot Delete a volume snapshot Destructive delete_snapshot_policies Delete snapshot policies Destructive delete_ssl_cert Delete SSL certificate Destructive delete_static_route Delete a static route Destructive delete_storage_pool Delete a storage pool Destructive delete_tags Delete tags from resources Destructive delete_template Delete a template Destructive delete_traffic_type Delete a traffic type from a physical network Destructive delete_user Delete a user Destructive delete_vlan_ip_range Delete a VLAN IP range Destructive delete_vm_schedule Delete virtual machine schedule Destructive delete_vm_snapshot Delete virtual machine snapshot Destructive delete_volume Delete a volume Destructive delete_vpc Delete a Virtual Private Cloud Destructive delete_vpc_offering Delete a VPC offering Destructive delete_vpn_connection Delete a VPN connection Destructive delete_vpn_customer_gateway Delete a VPN customer gateway Destructive delete_vpn_gateway Delete a VPN gateway Destructive delete_zone Delete a zone/data center Destructive destroy_router Destroy a virtual router Destructive destroy_system_vm Destroy system virtual machine Destructive destroy_virtual_machine Destroy (delete) a virtual machine Destructive expunge_virtual_machine Permanently delete a virtual machine Destructive release_bgp_peer Release dedicated BGP peer Destructive release_ipv4_subnet_for_zone Release dedicated IPv4 subnet for zone Destructive release_public_ip_range Release a dedicated public IP range Destructive remove_guest_os_mapping Remove guest OS mapping Destructive remove_nic_from_virtual_machine Remove a NIC from a virtual machine Destructive remove_nic_from_vm Remove network interface from virtual machine Destructive remove_resource_detail Remove resource detail from virtual machine Destructive remove_vms_from_kubernetes_cluster Remove virtual machines from a Kubernetes cluster Destructive remove_vmware_dc Remove VMware datacenter Destructive remove_vpn_user Remove VPN user Destructive revoke_certificate Revoke an SSL certificate Destructive revoke_security_group_egress Remove egress rule from security group Destructive revoke_security_group_ingress Remove ingress rule from security group
EXECUTE 29 tools
Execute confirm_dangerous_action Confirm a dangerous action that requires explicit user approval Execute declare_host_as_degraded Declare host as degraded Execute deploy_virtual_machine Deploy a new virtual machine in CloudStack with comprehensive configuration options Execute migrate_system_vm Migrate system VM to another host Execute migrate_virtual_machine Migrate a virtual machine to another host Execute migrate_vm_with_volume Migrate virtual machine with volumes Execute migrate_vpc Migrate VPC to different zone Execute patch_system_vm Patch system virtual machine Execute prepare_host_for_maintenance Put host in maintenance mode Execute reboot_router Reboot a virtual router Execute reboot_system_vm Reboot a system virtual machine Execute reboot_virtual_machine Reboot a virtual machine Execute reconnect_host Reconnect disconnected host Execute reset_vpn_connection Reset a VPN connection Execute restart_network Restart network with cleanup Execute restart_vpc Restart a Virtual Private Cloud Execute restart_vpn_gateway Restart VPN gateway service Execute scale_kubernetes_cluster Scale a Kubernetes cluster up or down Execute scale_system_vm Scale system VM resources Execute scale_virtual_machine Scale virtual machine CPU/memory Execute start_kubernetes_cluster Start a Kubernetes cluster Execute start_router Start a virtual router Execute start_system_vm Start a system virtual machine Execute start_virtual_machine Start a stopped virtual machine with advanced deployment options Execute stop_kubernetes_cluster Stop a running Kubernetes cluster Execute stop_router Stop a virtual router Execute stop_system_vm Stop a system virtual machine Execute stop_virtual_machine Stop a running virtual machine Execute upgrade_kubernetes_cluster Upgrade a Kubernetes cluster to a different version
WRITE 211 tools
Write activate_project Activate a suspended project Write add_account_to_project Add an account to a project Write add_guest_os_mapping Add guest OS mapping Write add_host Add hypervisor host to cluster Write add_image_store Add a new image store backend Write add_image_store_s3 Add Amazon S3 as image store backend Write add_kubernetes_supported_version Add a new supported Kubernetes version Write add_network_device Add a network device Write add_network_service_provider Add a network service provider Write add_nic_to_virtual_machine Add a NIC to a virtual machine Write add_nic_to_vm Add network interface to virtual machine Write add_resource_detail Add resource detail to virtual machine Write add_swift Add OpenStack Swift as image store backend Write add_traffic_type Add a traffic type to a physical network Write add_vms_to_kubernetes_cluster Add virtual machines to an existing Kubernetes cluster Write add_vmware_dc Add VMware datacenter Write add_vpn_user Add VPN user for Remote Access VPN Write archive_alerts Archive system alerts Write assign_ssl_cert_to_application_load_balancer Assign SSL certificate to application load balancer Write assign_to_load_balancer_rule Assign virtual machines to load balancer rule Write assign_virtual_machine Assign virtual machine to account Write assign_vm_to_backup_offering Assign virtual machine to backup offering Write assign_volume Assign volume to different account Write associate_ip_address Associate a public IP address Write attach_iso Attach ISO to a virtual machine Write attach_volume Attach a volume to a virtual machine Write authorize_security_group_egress Add egress rule to security group Write authorize_security_group_ingress Add ingress rule to security group Write cancel_host_as_degraded Cancel host degraded status Write change_service_for_router Change service offering for a router Write change_service_for_system_vm Change service offering for system VM Write change_service_offering Change the service offering of a virtual machine Write change_volume_offering Change disk offering for volume Write clean_vm_reservations Clean virtual machine reservations Write clone_virtual_machine Clone virtual machine Write configure_application_load_balancer Configure application load balancer Write configure_ha_for_host Configure HA for host Write configure_virtual_machine Configure virtual machine settings Write copy_iso Copy ISO to another zone Write copy_template Copy template to another zone Write copy_virtual_machine Copy virtual machine to another zone Write create_account Create a new CloudStack account Write create_application_load_balancer Create application load balancer Write create_backup Create backup Write create_bgp_peer Create BGP peer for dynamic routing Write create_bucket Create storage bucket Write create_customer_gateway Create a customer gateway Write create_dhcp_option Create a DHCP option Write create_disk_offering Create disk offering Write create_domain Create a new domain Write create_egress_firewall_rule Create an egress firewall rule Write create_firewall_rule Create firewall rule Write create_global_load_balancer Create global load balancer rule Write create_ip_forwarding_rule Create an IP forwarding rule Write create_ipv4_subnet_for_guest_network Create IPv4 subnet for guest network Write create_ipv4_subnet_for_zone Create IPv4 subnet for zone Write create_ipv6_firewall_rule Create IPv6 firewall rule for network Write create_kubernetes_cluster Create a new Kubernetes cluster Write create_lb_health_check_policy Create load balancer health check policy Write create_lb_stickiness_policy Create load balancer stickiness policy Write create_load_balancer_rule Create a load balancer rule Write create_network Create a new network Write create_network_acl Create network ACL rule Write create_network_acl_list Create a new Network ACL list for VPC Write create_network_offering Create a new network offering Write create_physical_network Create a new physical network Write create_pod Create a new pod Write create_port_forwarding_rule Create port forwarding rule Write create_private_gateway Create a private gateway for VPC Write create_project Create a new project for multi-tenancy Write create_remote_access_vpn Create Remote Access VPN Write create_role Create a new role with specified permissions Write create_role_permission Create permission rules for a role Write create_routing_firewall_rule Create IPv4 routing firewall rule Write create_security_group Create a security group Write create_service_offering Create a new service offering in CloudStack Write create_snapshot Create a snapshot of a volume Write create_snapshot_policy Create snapshot policy Write create_static_route Create a static route for VPC Write create_storage_pool Create a new storage pool Write create_tags Create tags for resources Write create_template Create a template from a virtual machine or volume Write create_template_from_vm Create template from virtual machine Write create_user Create a user for an existing account Write create_vlan_ip_range Create a VLAN IP range Write create_vm_schedule Create virtual machine schedule Write create_vm_snapshot Create virtual machine snapshot Write create_volume Create a new data volume Write create_volume_from_snapshot Create a new volume from a snapshot Write create_vpc Create a Virtual Private Cloud Write create_vpc_offering Create a new VPC offering Write create_vpn_connection Create a Site-to-Site VPN connection Write create_vpn_customer_gateway Create a VPN customer gateway Write create_vpn_gateway Create a VPN gateway Write create_zone Create a new zone/data center Write dedicate_bgp_peer Dedicate BGP peer to domain/account Write dedicate_ipv4_subnet_for_zone Dedicate IPv4 subnet for zone to domain/account Write dedicate_pod Dedicate a pod to a domain or account Write dedicate_public_ip_range Dedicate a public IP range to an account Write dedicate_zone Dedicate zone to specific account Write detach_iso Detach ISO from a virtual machine Write detach_volume Detach a volume from a virtual machine Write disable_2fa Disable two-factor authentication for user Write disable_account Disable an account Write disable_ha_for_host Disable HA for host Write disable_ha_for_zone Disable high availability for zone Write disable_static_nat Disable static NAT for IP address Write disable_user Disable a user Write disable_vm_ha Disable high availability for virtual machine Write disable_vpn_gateway Disable VPN gateway Write disassociate_ip_address Disassociate a public IP address Write enable_2fa Enable two-factor authentication for user Write enable_account Enable a disabled account Write enable_ha_for_host Enable HA for host Write enable_ha_for_zone Enable high availability for zone Write enable_static_nat Enable static NAT for IP address Write enable_user Enable a previously disabled user Write enable_vm_ha Enable high availability for virtual machine Write enable_vpn_gateway Enable VPN gateway Write generate_usage_records Generate usage records for billing Write import_unmanaged_instance Import unmanaged virtual machine instance Write import_vm Import virtual machine Write invalidate_user_session Terminate user sessions Write issue_certificate Issue a new SSL certificate Write link_vm_to_backup Link virtual machine to backup Write lock_account Lock an account to prevent login Write lock_user Lock a user account Write migrate_volume Migrate a volume to another storage pool Write move_network_acl_item Move a network ACL item to a different position Write move_user Move a user to a different account Write prepare_template Prepare template in a specific zone Write quota_credits Manage account credit allocations Write quota_statement Generate detailed billing statements for account Write quota_update Update account quota settings Write recover_virtual_machine Recover a destroyed virtual machine Write recover_volume Recover deleted volume Write register_iso Register an ISO from external URL Write register_template Register a template from external URL Write register_user_keys Register API key/secret key for a user Write release_dedicated_zone Release zone dedication Write release_host_reservation Release host reservation Write remove_from_load_balancer_rule Remove virtual machines from load balancer rule Write replace_network_acl_list Replace Network ACL list for a network Write reset_load_balancer_rule Reset load balancer rule statistics Write reset_network_permissions Reset network permissions Write reset_user_password Admin password reset capability for users Write reset_vm_password Reset virtual machine password Write reset_vm_user_data Reset virtual machine user data Write resize_volume Resize a volume Write restore_backup Restore backup Write restore_virtual_machine Restore a virtual machine Write set_user_security_policy Configure user security settings and policies Write suspend_project Suspend a project Write transfer_account Transfer account ownership to different domain Write unlink_vm_from_backup Unlink virtual machine from backup Write update_account Update account information Write update_application_load_balancer Update application load balancer Write update_bgp_peer Update BGP peer configuration Write update_configuration Update a CloudStack global configuration Write update_default_nic_for_virtual_machine Update the default NIC for a virtual machine Write update_default_nic_for_vm Update default NIC for virtual machine Write update_domain Update domain information Write update_global_load_balancer Update global load balancer rule Write update_host Update host configuration Write update_host_password Update host password Write update_image_store Update an image store backend Write update_ip_address Update IP address information Write update_ipv4_subnet_for_zone Update IPv4 subnet for zone Write update_ipv6_firewall_rule Update IPv6 firewall rule Write update_iso Update ISO properties Write update_kubernetes_supported_version Update a previously added Kubernetes version Write update_lb_health_check_policy Update load balancer health check policy Write update_lb_stickiness_policy Update load balancer stickiness policy Write update_load_balancer_rule Update a load balancer rule Write update_network Update network properties Write update_network_acl Update network ACL rule Write update_network_acl_item Update a Network ACL rule Write update_network_acl_list Update a Network ACL list Write update_network_offering Update network offering properties Write update_network_service_provider Update a network service provider Write update_physical_network Update a physical network Write update_pod Update a pod Write update_port_forwarding_rule Update port forwarding rule Write update_project Update project information Write update_remote_access_vpn Update Remote Access VPN settings Write update_resource_count Recalculate and update resource usage counts Write update_resource_limit Update resource limits for accounts or domains Write update_role Update role information Write update_routing_firewall_rule Update IPv4 routing firewall rule Write update_service_offering Update an existing service offering in CloudStack Write update_ssl_cert Update SSL certificate Write update_storage_pool Update storage pool properties Write update_template Update template properties Write update_traffic_type Update a traffic type Write update_user Update user information Write update_virtual_machine Update virtual machine properties Write update_vm_affinity_group Update virtual machine affinity group Write update_vm_guest_os Update virtual machine guest OS type Write update_vm_snapshot Update virtual machine snapshot Write update_vmware_dc Update VMware datacenter Write update_volume Update volume properties Write update_vpc Update VPC properties Write update_vpc_offering Update VPC offering properties Write update_vpn_connection Update VPN connection parameters Write update_vpn_customer_gateway Update VPN customer gateway settings Write update_vpn_gateway Update VPN gateway configuration Write update_zone Update zone configuration Write upgrade_virtual_machine Upgrade virtual machine Write upload_custom_certificate Upload a custom SSL certificate Write upload_ssl_cert Upload SSL certificate Write upload_volume Upload a volume from URL
READ 125 tools
Read check_volume Check volume integrity Read extract_iso Extract ISO for download Read extract_template Extract template for download Read extract_volume Extract volume for download Read find_hosts_for_migration Find suitable hosts for VM migration Read generate_account_usage_report Generate usage analytics report for account Read get_account_billing Retrieve detailed billing data for account Read get_cloudstack_info Get CloudStack environment information and connection status Read get_kubernetes_cluster_config Retrieve configuration for a Kubernetes cluster Read get_load_balancer_health Get load balancer health status Read get_user Get detailed information about a specific user Read get_user_audit_trail Get user activity audit logs and history Read get_user_keys Get API keys for a specific user Read get_user_login_history Track user login activities and history Read get_vm_console_url Get virtual machine console URL Read get_vm_password Get virtual machine password Read get_vm_user_data Get virtual machine user data Read get_vm_vnc_url Get virtual machine VNC console URL Read list_account_types List available account types Read list_accounts List CloudStack accounts Read list_alerts List system alerts Read list_application_load_balancers List application load balancers Read list_async_jobs List asynchronous jobs Read list_backups List backups Read list_bgp_peers List BGP peers Read list_buckets List storage buckets Read list_ca_providers List available Certificate Authority providers Read list_capabilities List CloudStack capabilities and features Read list_capacity List system capacity information Read list_configurations List CloudStack global configurations Read list_customer_gateways List customer gateways Read list_dedicated_hosts List dedicated hosts Read list_dedicated_zones List dedicated zones Read list_dhcp_options List DHCP options for a network Read list_domain_children List immediate children of a domain Read list_domains List domains Read list_egress_firewall_rules List egress firewall rules Read list_events List system events Read list_firewall_rules List firewall rules Read list_global_load_balancers List global load balancer rules Read list_guest_os_mapping List guest OS mappings Read list_host_ha_providers List host HA providers Read list_host_ha_resources List host HA resources Read list_host_tags List host tags Read list_hosts List hypervisor hosts in CloudStack Read list_hosts_metrics List host performance metrics Read list_image_stores List all image store backends Read list_ip_forwarding_rules List IP forwarding rules Read list_ipv4_subnets_for_guest_network List IPv4 subnets for guest networks Read list_ipv4_subnets_for_zone List IPv4 subnets for zone Read list_ipv6_firewall_rules List IPv6 firewall rules Read list_isos List ISOs available in CloudStack Read list_kubernetes_clusters List all Kubernetes clusters Read list_kubernetes_supported_versions Display supported Kubernetes versions Read list_lb_health_check_policies List load balancer health check policies Read list_lb_stickiness_policies List load balancer stickiness policies Read list_load_balancer_certificates List load balancer SSL certificates Read list_load_balancer_metrics List load balancer performance metrics Read list_load_balancer_rules List load balancer rules Read list_network_acl_lists List Network ACL lists Read list_network_acls List network ACL rules Read list_network_device List network devices Read list_network_offerings List available network offerings Read list_network_permissions List network permissions Read list_network_service_providers List network service providers Read list_networks List networks in CloudStack Read list_nics List NICs Read list_object_storage_pools List object storage pools Read list_os_categories List OS categories Read list_os_types List supported OS types Read list_physical_networks List physical networks Read list_pods List all pods Read list_port_forwarding_rules List port forwarding rules Read list_private_gateways List private gateways Read list_project_accounts List accounts in a project Read list_projects List projects Read list_public_ip_addresses List public IP addresses Read list_remote_access_vpns List Remote Access VPNs Read list_resource_details List resource details for virtual machine Read list_resource_limits List resource limits for accounts, domains, or projects Read list_role_permissions List permissions for a role Read list_roles List roles in CloudStack Read list_router_health List router health status Read list_routers List virtual routers Read list_routing_firewall_rules List IPv4 routing firewall rules Read list_security_groups List security groups Read list_service_offerings List compute service offerings in CloudStack Read list_snapshot_policies List snapshot policies Read list_snapshots List volume snapshots in CloudStack Read list_ssl_certs List SSL certificates Read list_static_routes List static routes Read list_storage_pools List storage pools Read list_system_vms List system virtual machines Read list_system_vms_usage_history List system VMs usage history Read list_tags List tags Read list_templates List VM templates in CloudStack Read list_traffic_types List traffic types Read list_usage_records List usage records Read list_user_sessions List active user sessions Read list_users List users Read list_virtual_machines List virtual machines in CloudStack with comprehensive filtering options Read list_vlan_ip_ranges List VLAN IP ranges Read list_vm_affinity_groups List virtual machine affinity groups Read list_vm_metrics List virtual machine metrics Read list_vm_schedule List virtual machine schedules Read list_vm_snapshots List virtual machine snapshots Read list_vm_usage_history List virtual machine usage history Read list_vmware_dc_vms List VMs in VMware datacenter Read list_vmware_dcs List VMware datacenters Read list_volume_metrics List volume performance metrics Read list_volumes List storage volumes in CloudStack Read list_vpc_offerings List VPC offerings Read list_vpcs List Virtual Private Clouds Read list_vpn_connections List VPN connections Read list_vpn_customer_gateways List VPN customer gateways Read list_vpn_gateways List VPN gateways Read list_vpn_instances List VPN instances with detailed configuration Read list_vpn_users List VPN users Read list_zones List availability zones in CloudStack Read query_async_job_result Query the result of an asynchronous job Read quota_balance Check current quota balance for account Read quota_summary Get account resource usage summary Read revert_to_vm_snapshot Revert virtual machine to snapshot Read validate_account_limits Validate resource limit compliance for account Read validate_user_permissions Check user permission status and validate access
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
paymentsadminautomation
Binance MCP Server 734 tools
paymentsadminautomation
GoHighLevel MCP Server 566 tools
paymentsadminautomation
GoCreative Agent API 546 tools
paymentsadminautomation
Claude Flow 454 tools
paymentsadminautomation
ServiceTitan MCP Server 454 tools
paymentsadminautomation
Integrations MCP 420 tools
paymentsadminautomation
Wpm Mcp Server 420 tools
paymentsadminautomation
FAQ

Questions about CloudStack MCP Server

Can an AI agent delete data through the CloudStack MCP Server MCP server? +

Yes. The CloudStack MCP Server server exposes 77 destructive tools including cancel_host_maintenance, delete_account, delete_account_from_project. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through CloudStack MCP Server? +

The CloudStack MCP Server server has 211 write tools including activate_project, add_account_to_project, add_guest_os_mapping. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach CloudStack MCP Server.

How many tools does the CloudStack MCP Server MCP server expose? +

442 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 125 are read-only. 317 can modify, create, or delete data.

How do I enforce a policy on CloudStack MCP Server? +

Register the CloudStack MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every CloudStack MCP Server tool call.

Deterministic rules across all 442 CloudStack MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CLOUDSTACK →

Instant setup, no code required.

442 CloudStack MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.