// SCAN REPORT

Google Cloud NetApp Volumes MCP Server

85 tools. 52 can modify or destroy data without limits.

16 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

52 can modify or destroy data

33 read-only

85 tools total

Community server · catalogue entry verified 30/06/2026

How to control Google Cloud NetApp Volumes MCP Server ↓

TOOL MAP

What Google Cloud NetApp Volumes MCP Server exposes to your agents

Read (33) Write / Execute (36) Destructive / Financial (16)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Cloud NetApp Volumes MCP Server tools

Destructive · High gcnv_active_directory_delete The tool deletes an active directory configuration, which is a critical infrastructure component. Destructive · High gcnv_backup_delete Backup deletion is a destructive operation that cannot be undone. Destructive · High gcnv_backup_policy_delete Deletion of a backup policy is a destructive action that cannot be easily undone. Destructive · High gcnv_backup_vault_delete This tool permanently removes a backup vault resource, destroying the backup storage location and potentially all associated backup data.

52 of Google Cloud NetApp Volumes MCP Server's 85 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Cloud NetApp Volumes MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Cloud NetApp Volumes MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "gcnv_active_directory_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "gcnv_active_directory_create": {
    "limits": [
      {
        "counter": "gcnv_active_directory_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "gcnv_active_directory_get": {
    "limits": [
      {
        "counter": "gcnv_active_directory_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Cloud NetApp Volumes MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE CLOUD NETAPP VOLUMES →

Instant setup, no code required.

FULL CATALOGUE

All 85 Google Cloud NetApp Volumes MCP Server tools

DESTRUCTIVE 16 tools

Destructive gcnv_active_directory_delete Deletes an active directory configuration Destructive gcnv_backup_delete Deletes a backup from the specified backup vault Destructive gcnv_backup_policy_delete Deletes a backup policy in the specified project and location Destructive gcnv_backup_vault_delete Deletes a backup vault in the specified project and location Destructive gcnv_host_group_delete Deletes a host group in the specified project and location Destructive gcnv_kms_config_delete Deletes a KMS configuration Destructive gcnv_operation_cancel Cancels a long-running operation that is still in progress Destructive gcnv_quota_rule_delete Deletes a quota rule Destructive gcnv_replication_delete Deletes a replication configuration Destructive gcnv_snapshot_delete Deletes a GCNV managed snapshot of a volume. Destructive gcnv_snapshot_revert Reverts a GCNV managed volume to a previous snapshot. Destructive gcnv_storage_pool_delete Deletes a storage pool in the specified project and location Destructive gcnv_volume_delete Deletes a GCNV managed volume in the specified storage pool. Destructive ontap_lun_delete Deletes a LUN by UUID. Returns a preview first — show it to the user and get explicit Destructive ontap_snapshot_delete Deletes a snapshot from an ONTAP volume. Returns a preview first — show it to the user and get Destructive ontap_volume_delete Deletes an ONTAP volume by UUID. Returns a preview first — show it to the user and get

EXECUTE 8 tools

Execute gcnv_kms_config_verify Verifies KMS config reachability after granting CMEK permissions; typically run after following the instructio Execute gcnv_replication_establish_peering Establishes replication peering between clusters Execute gcnv_replication_resume Resumes a paused replication Execute gcnv_replication_reverse_direction Reverses the direction of an existing replication Execute gcnv_replication_stop Stops an active replication Execute gcnv_replication_sync Syncs the replication - invokes one time volume data transfer from source to destination Execute gcnv_storage_pool_validate_directory_service Validates directory service policy attached to a storage pool Execute ontap_execute Executes an ONTAP REST API call on an ONTAP expert mode pool.

WRITE 28 tools

Write gcnv_active_directory_create Creates a new active directory configuration Write gcnv_active_directory_update Updates an active directory configuration Write gcnv_backup_create Creates a new backup of a volume in the specified backup vault Write gcnv_backup_policy_create Creates a new backup policy in the specified project and location Write gcnv_backup_policy_update Updates the properties of an existing backup policy Write gcnv_backup_restore Restores a backup to a new or existing volume Write gcnv_backup_restore_files Restores specific files from a backup into a destination volume Write gcnv_backup_update Updates a backup with full spec Write gcnv_backup_vault_create Creates a new backup vault in the specified project and location Write gcnv_backup_vault_update Updates the properties of an existing backup vault Write gcnv_host_group_create Creates a new host group in the specified project and location Write gcnv_host_group_update Updates a host group (partial update using updateMask) Write gcnv_kms_config_create Creates a new KMS (Key Management Service) configuration Write gcnv_kms_config_update Updates a KMS configuration Write gcnv_quota_rule_create Creates a new quota rule for a volume Write gcnv_quota_rule_update Updates a quota rule Write gcnv_replication_create Creates a new replication between volumes. Only supported region pairs/region-groups are allowed; see https:// Write gcnv_replication_update Updates a replication configuration Write gcnv_snapshot_create Creates a GCNV managed snapshot of the specified volume. Write gcnv_snapshot_update Updates a GCNV managed snapshot of a volume. Write gcnv_storage_pool_create Creates a new storage pool in the specified project and location Write gcnv_storage_pool_update Updates a storage pool in the specified project and location Write gcnv_volume_create Creates a GCNV managed volume in the specified storage pool. Write gcnv_volume_update Updates a GCNV managed volume in the specified storage pool. Write ontap_audit_log Controls ONTAP operation audit logging for the current session. Write ontap_lun_create Creates a LUN (Logical Unit Number) on an ONTAP volume. Write ontap_snapshot_create Creates a snapshot of an ONTAP volume. Returns an async job UUID. Write ontap_volume_create Creates an ONTAP volume on the expert mode pool. Returns an async job UUID.

READ 33 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Cloud NetApp Volumes MCP Server

Can an AI agent delete data through the Google Cloud NetApp Volumes MCP Server MCP server? +

Yes. The Google Cloud NetApp Volumes MCP Server server exposes 16 destructive tools including gcnv_active_directory_delete, gcnv_backup_delete, gcnv_backup_policy_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Cloud NetApp Volumes MCP Server? +

The Google Cloud NetApp Volumes MCP Server server has 28 write tools including gcnv_active_directory_create, gcnv_active_directory_update, gcnv_backup_create. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Cloud NetApp Volumes MCP Server.

How many tools does the Google Cloud NetApp Volumes MCP Server MCP server expose? +

85 tools across 4 categories: Destructive, Execute, Read, Write. 33 are read-only. 52 can modify, create, or delete data.

How do I enforce a policy on Google Cloud NetApp Volumes MCP Server? +

Register the Google Cloud NetApp Volumes MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Cloud NetApp Volumes MCP Server tool call.

Deterministic rules across all 85 Google Cloud NetApp Volumes MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE CLOUD NETAPP VOLUMES →

Instant setup, no code required.

85 Google Cloud NetApp Volumes MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.