// SCAN REPORT

Plex MCP Server

54 tools. 17 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated:

17 can modify or destroy data
37 read-only
54 tools total

Community server · catalogue entry verified 11/06/2026

How to control Plex MCP Server ↓

TOOL MAP

Read (37) Write / Execute (13) Destructive / Financial (4)

MOST DANGEROUS TOOLS

Critical Risk
Destructive · Critical clear_playlist Clear all items from a playlist (preview unless confirm=true; requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive · High delete_playlist Delete a Plex playlist without deleting the underlying media (requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive · High remove_from_playlist Remove an item from a playlist (requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive · High remove_from_watchlist Remove a media item from watchlist (requires PLEX_ENABLE_MUTATIVE_OPS=true)

17 of Plex MCP Server's 54 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL PLEX MCP SERVER

PolicyLayer is an MCP gateway — it sits between your AI agents and Plex MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "clear_playlist": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_to_playlist": {
    "limits": [
      {
        "counter": "add_to_playlist_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "arr_get_status": {
    "limits": [
      {
        "counter": "arr_get_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Plex MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON PLEX →

Free to start. No card required.

ALL 54 PLEX MCP SERVER TOOLS

DESTRUCTIVE 4 tools
Destructive clear_playlist Clear all items from a playlist (preview unless confirm=true; requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive delete_playlist Delete a Plex playlist without deleting the underlying media (requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive remove_from_playlist Remove an item from a playlist (requires PLEX_ENABLE_MUTATIVE_OPS=true) Destructive remove_from_watchlist Remove a media item from watchlist (requires PLEX_ENABLE_MUTATIVE_OPS=true)
EXECUTE 4 tools
Execute radarr_trigger_search Trigger a search for missing movies, optionally for a specific movie Execute sonarr_trigger_search Trigger a search for missing episodes, optionally for a specific series Execute trakt_authenticate Start Trakt.tv OAuth authentication process Execute trakt_start_scrobbling Enable real-time scrobbling to Trakt.tv
WRITE 9 tools
Write add_to_playlist Add a media item to a playlist (requires PLEX_ENABLE_MUTATIVE_OPS=true) Write add_to_watchlist Add a media item to watchlist (requires PLEX_ENABLE_MUTATIVE_OPS=true) Write create_playlist Create a new Plex playlist (requires PLEX_ENABLE_MUTATIVE_OPS=true). Write export_library Export a full library to a JSON file (within ./exports) Write radarr_add_movie Add a new movie to Radarr by TMDB ID Write sonarr_add_series Add a new series to Sonarr by TVDB ID Write trakt_complete_auth Complete Trakt.tv authentication with authorization code Write update_metadata Update metadata fields for a media item (requires PLEX_ENABLE_MUTATIVE_OPS=true) Write update_metadata_from_json Update metadata from a JSON payload (requires PLEX_ENABLE_MUTATIVE_OPS=true)
READ 37 tools
Read arr_get_status Check connection status of Sonarr and Radarr services Read get_editable_fields Get editable fields and available tags for a media item Read get_fully_watched Get all fully watched movies and shows from a library Read get_libraries Get all Plex libraries Read get_library_items List items in a library with pagination (useful for large libraries) Read get_library_stats Get library-specific statistics Read get_media_details Get detailed information about a specific media item Read get_on_deck Get on deck (continue watching) items Read get_playlist_items Get items in a Plex playlist Read get_playlists Get all Plex playlists Read get_popular_content Get most popular content by plays or duration Read get_recently_added Get recently added media Read get_recently_watched Get recently watched movies and shows Read get_recommendations Get personalized movie recommendations from your Plex library based on watch history. Read get_user_stats Get user-specific watch statistics Read get_watch_history Get detailed watch history with session information Read get_watch_stats Get comprehensive watch statistics (Tautulli-style analytics) Read get_watchlist Get the user Read radarr_get_calendar Get upcoming movies from the Radarr calendar Read radarr_get_missing Get missing/wanted movies from Radarr Read radarr_get_movies List all movies in Radarr with optional title filter Read radarr_get_profiles Get Radarr quality profiles and root folders (needed before adding movies) Read radarr_get_queue Get the current Radarr download queue Read radarr_search Search TMDB for new movies to add to Radarr Read search_media Search for media in Plex libraries Read sonarr_get_calendar Get upcoming episodes from the Sonarr calendar Read sonarr_get_missing Get missing/wanted episodes from Sonarr Read sonarr_get_profiles Get Sonarr quality profiles and root folders (needed before adding series) Read sonarr_get_queue Get the current Sonarr download queue Read sonarr_get_series List all series in Sonarr with optional title filter Read sonarr_search Search TheTVDB for new series to add to Sonarr Read trakt_get_auth_status Check Trakt.tv authentication status Read trakt_get_sync_status Check status of ongoing sync operations Read trakt_get_user_stats Get enhanced viewing statistics from Trakt.tv Read trakt_search Search for movies and shows on Trakt.tv Read trakt_sync_from_trakt Get watch history from Trakt.tv for comparison Read trakt_sync_to_trakt Sync Plex watch history to Trakt.tv

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

BNB Chain MCP 1240 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Nodebench 724 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
UnClick 451 tools
adminautomation
NowAIKit — ServiceNow AI Toolkit 446 tools
adminautomation
Mcp Windows 441 tools
adminautomation
0nmcp 407 tools
adminautomation

FAQ

Can an AI agent delete data through the Plex MCP Server MCP server? +

Yes. The Plex MCP Server server exposes 4 destructive tools including clear_playlist, delete_playlist, remove_from_playlist. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Plex MCP Server? +

The Plex MCP Server server has 9 write tools including add_to_playlist, add_to_watchlist, create_playlist. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Plex MCP Server.

How many tools does the Plex MCP Server MCP server expose? +

54 tools across 4 categories: Destructive, Execute, Read, Write. 37 are read-only. 17 can modify, create, or delete data.

How do I enforce a policy on Plex MCP Server? +

Register the Plex MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Plex MCP Server tool call.

Deterministic rules across all 54 Plex MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PLEX →

Free to start. No card required.

54 Plex MCP Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.