// SCAN REPORT

LudusMCP Server

29 tools. 8 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 11 Jun 2026

8 can modify or destroy data

21 read-only

29 tools total

Community server · catalogue entry verified 11/06/2026

How to control LudusMCP Server ↓

TOOL MAP

Read (21) Write / Execute (7) Destructive / Financial (1)

MOST DANGEROUS TOOLS

Critical Risk

Destructive · Critical destroy_range The tool explicitly performs irreversible deletion of virtualized environments (VMs) and all associated data. Execute · High deploy_range Deploying a range triggers external infrastructure provisioning — spinning up virtualized machines and networks. Execute · Critical ludus_cli_execute A tool that executes CLI commands in a cybersecurity training environment can trigger arbitrary operations on virtual infrastructure, potentially affecting deployed ranges, credentials, and security configurations. Execute · High ludus_power This tool executes commands that change the state of virtual machines.

8 of LudusMCP Server's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL LUDUSMCP SERVER

PolicyLayer is an MCP gateway — it sits between your AI agents and LudusMCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "destroy_range": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "get_credential_from_user": {
    "limits": [
      {
        "counter": "get_credential_from_user_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_connection_info": {
    "limits": [
      {
        "counter": "get_connection_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register LudusMCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON LUDUSMCP →

Free to start. No card required.

ALL 29 LUDUSMCP SERVER TOOLS

DESTRUCTIVE 1 tools

Destructive destroy_range Destroy a Ludus range, permanently removing all VMs and freeing resources. This action is irreversible and wil

EXECUTE 3 tools

Execute deploy_range Deploy a Ludus range from a configuration file. This creates a new virtualized training environment based on t Execute ludus_cli_execute CRITICAL: Do NOT include Execute ludus_power Power management for range VMs (start/stop). Power off operations require confirmation as they may interrupt r

WRITE 4 tools

Write get_credential_from_user MCP TOOL (NOT a Ludus CLI command) - Prompt user to securely enter a credential via popup dialog and store in Write ludus_range_planner PRIMARY RANGE ORCHESTRATOR - Use this FIRST for any range creation! Analyzes requirements, researches roles/te Write set_range_config Apply range configuration to Ludus server. Sets active configuration for deployment.\n\nWORKING DIRECTORY: All Write write_range_config Write range configuration to file with automatic validation. Creates directories as needed.

READ 21 tools

Read get_connection_info Get connection information for accessing a Ludus range. Supports RDP configurations, WireGuard VPN configs, an Read get_range_config Get current range configuration from Ludus server or retrieve example configuration. Read get_range_status Get the current status and details of a Ludus range. Shows deployment state, VM information, and range configu Read get_tags Get the ansible tags available for use with deploy. This shows all available deployment tags that can be used Read list_all_users List all users in the Ludus system. Requires admin privileges. Read list_range_configs List and analyze range configurations in directory. Provides validation status and metadata. Read list_user_ranges List all deployed ranges for a user, showing current status and basic information. Read ludus_docs_search Search Ludus documentation for configuration help, troubleshooting, and best practices. Read ludus_environment_guides_search Search environment-specific guides and tutorials for different types of cyber ranges. Read ludus_help Get help information for Ludus CLI commands and subcommands. Read ludus_list_role_collection_schemas List all available role and collection schema files (.yaml/.yml) in ~/.ludus-mcp/schemas/. Shows inventory of Read ludus_networking_docs_read NETWORKING DOCUMENTATION - Direct Access to Complete Ludus Networking Documentation DIRECT ACCESS TO: - Netwo Read ludus_networking_search Search networking documentation for VPN, network topology, and connectivity guidance. Read ludus_range_config_check_against_plan QA checklist tool to verify range configuration against original user requirements and plan. Used during valid Read ludus_read_range_config_schema Direct access to official Ludus range configuration JSON schema. Provides complete structure, validation rules Read ludus_read_role_collection_schema ROLE SCHEMA REFERENCE - Reads Ludus role and collection schemas from individual YAML files. Returns comprehens Read ludus_roles_docs_read ROLES DOCUMENTATION - Direct Access to Complete Ludus Roles Documentation DIRECT ACCESS TO: - Complete roles Read ludus_roles_search Search Ludus roles documentation for specific roles, variables, and usage examples. Read range_abort Abort an in-progress range deployment, stopping all deployment tasks. Read read_range_config Read and display range configuration from file or URL. Supports local files and remote URLs. Read validate_range_config Validate range configuration against schema and best practices. Essential before deployment.

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent delete data through the LudusMCP Server MCP server? +

Yes. The LudusMCP Server server exposes 1 destructive tools including destroy_range. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through LudusMCP Server? +

The LudusMCP Server server has 4 write tools including get_credential_from_user, ludus_range_planner, set_range_config. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach LudusMCP Server.

How many tools does the LudusMCP Server MCP server expose? +

29 tools across 4 categories: Destructive, Execute, Read, Write. 21 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on LudusMCP Server? +

Register the LudusMCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every LudusMCP Server tool call.

Deterministic rules across all 29 LudusMCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LUDUSMCP →

Free to start. No card required.

29 LudusMCP Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

LudusMCP Server

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL LUDUSMCP SERVER

// ALL 29 LUDUSMCP SERVER TOOLS

// RELATED SERVERS

// FAQ