// SCAN REPORT

Mxray

28 tools. 18 can modify or destroy data without limits.

18 write tools that can modify data. Rate limits recommended.

Last updated:

18 can modify or destroy data
10 read-only
28 tools total

Community server · catalogue entry verified 01/07/2026

How to control Mxray ↓

TOOL MAP

What Mxray exposes to your agents

Read (10) Write / Execute (18) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous Mxray tools

Write · Medium add_tests_to_test_plan This tool modifies test plan configuration by adding tests, which is a write operation that changes state but is not destructive (tests and plans remain intact). Write · Medium add_tests_to_test_set This tool modifies existing test sets by adding tests to them. Write · Medium create_test This tool creates new test objects in Jira Cloud, which is a reversible data modification operation. Write · Medium create_test_execution This tool creates test executions in Jira Cloud, which is a reversible operation—test executions can be modified or deleted by administrators.

18 of Mxray's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mxray

PolicyLayer is an MCP gateway — it sits between your AI agents and Mxray, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "add_tests_to_test_plan": {
    "limits": [
      {
        "counter": "add_tests_to_test_plan_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "export_cucumber_features": {
    "limits": [
      {
        "counter": "export_cucumber_features_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Mxray — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON MXRAY →

Instant setup, no code required.

FULL CATALOGUE

All 28 Mxray tools

WRITE 18 tools
Write add_tests_to_test_plan Add tests to an existing test plan via Xray GraphQL (requires Xray credentials). Write add_tests_to_test_set Add tests to an existing test set via Xray GraphQL (requires Xray credentials). Write create_test Create a new test in Jira with specified type (Manual/Cucumber/Generic). Write create_test_execution Create a new test execution in Jira. Optionally add tests to it (requires Xray credentials for adding tests). Write create_test_plan Create a new test plan in Jira. Write create_test_set Create a new test set in Jira. Write import_behave_results Import Behave JSON test results (requires Xray credentials). Write import_cucumber_results Import Cucumber JSON test results (requires Xray credentials). Write import_execution_results Import test execution results in Xray JSON format (requires Xray credentials). Write import_feature_file Import a Cucumber .feature file to create/update tests in Xray (requires Xray credentials). Write import_junit_results Import JUnit XML test results (requires Xray credentials). Write import_nunit_results Import NUnit XML test results (requires Xray credentials). Write import_robot_results Import Robot Framework XML test results (requires Xray credentials). Write import_testng_results Import TestNG XML test results (requires Xray credentials). Write update_gherkin_test_definition Update the Gherkin scenario definition of a Cucumber test via GraphQL (requires Xray credentials). Write update_test Update fields of an existing test in Jira. Write update_test_run Update the status and comment of a test run within a test execution (requires Xray credentials). Write update_test_type Change the Xray test type (Manual/Cucumber/Generic) via GraphQL (requires Xray credentials).
READ 10 tools
Read export_cucumber_features Export Cucumber feature files from Xray. Can export all features or specific test keys (requires Xray credenti Read get_test Get details of a specific test from Jira. Read get_test_execution Get details of a test execution, including associated test runs if Xray is configured. Read get_test_plan Get details of a test plan, including associated tests if Xray is configured. Read get_test_set Get details of a test set, including associated tests if Xray is configured. Read get_test_with_steps Get test details including test steps from Xray (requires Xray credentials). Read list_test_executions List test executions in a Jira project. Read list_test_plans List test plans in a Jira project. Read list_test_sets List test sets in a Jira project. Read list_tests List tests in a Jira project. Supports filtering by labels and component.
FAQ

Questions about Mxray

How do I prevent bulk modifications through Mxray? +

The Mxray server has 18 write tools including add_tests_to_test_plan, add_tests_to_test_set, create_test. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mxray.

How many tools does the Mxray MCP server expose? +

28 tools across 2 categories: Read, Write. 10 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Mxray? +

Register the Mxray MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mxray tool call.

Deterministic rules across all 28 Mxray tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MXRAY →

Instant setup, no code required.

28 Mxray tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.