// SCAN REPORT

Arcmap

48 tools. 27 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 2 Jul 2026

27 can modify or destroy data

21 read-only

48 tools total

Community server · catalogue entry verified 02/07/2026

How to control Arcmap ↓

TOOL MAP

What Arcmap exposes to your agents

Read (21) Write / Execute (26) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Arcmap tools

Destructive · High remove_layer Removing a layer from an active data frame is an irreversible operation that cannot be undone without manual recovery. Execute · High execute_arcpy This tool executes arbitrary Python/arcpy code in the context of a live ArcMap application. Execute · High run_geoprocessing Geoprocessing operations can perform complex spatial transformations, modify data, and trigger external geospatial operations. Execute · Medium select_by_attribute The tool executes an SQL query to select features in a live ArcMap session and refreshes the display.

27 of Arcmap's 48 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Arcmap

PolicyLayer is an MCP gateway — it sits between your AI agents and Arcmap, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "remove_layer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_layer": {
    "limits": [
      {
        "counter": "add_layer_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "calculate_geometry": {
    "limits": [
      {
        "counter": "calculate_geometry_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Arcmap — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ARCMAP →

Instant setup, no code required.

FULL CATALOGUE

All 48 Arcmap tools

DESTRUCTIVE 1 tools

Destructive remove_layer Quita una capa del data frame activo por nombre.

EXECUTE 9 tools

Execute contours Genera curvas de nivel desde un MDT (3D Analyst). intervalo = equidistancia Execute execute_arcpy execute_arcpy Execute goto_ddp_page Sitúa el atlas en una página y refresca la vista. Indica pagina (ID 1-based) Execute hydrology hydrology Execute least_cost_path least_cost_path Execute refresh Refresca la vista activa y la tabla de contenidos de ArcMap. Execute run_geoprocessing run_geoprocessing Execute select_by_attribute Selecciona entidades de una capa por SQL (NEW_SELECTION) y refresca. Execute zoom_to_layer Encuadra el mapa al extent de una capa por nombre y refresca el canvas vivo.

WRITE 17 tools

Write add_layer Añade una capa al data frame activo desde una ruta a shapefile, feature class de Write apply_symbology_from_layer Aplica la simbología de un archivo .lyr (estilos canónicos) a una capa Write clear_selection Limpia la selección de una capa (capa=nombre) o de TODAS las capas del data Write export_ddp export_ddp Write export_jpg Exporta el layout actual de ArcMap a un JPG en la ruta salida (dpi 230 por Write export_pdf Exporta el layout actual de ArcMap a un PDF en la ruta salida. Write export_view_png export_view_png Write repair_data_source Reapunta la fuente de una capa sustituyendo su workspace (ruta_antigua -> Write save_mxd Guarda el documento .mxd abierto en su ruta actual. Devuelve la ruta guardada. Write save_mxd_as Guarda una COPIA del .mxd en salida (no cambia el documento activo ni su ruta). Write set_active_df Fija el data frame activo por nombre y refresca. Las tools que operan sobre 'el df Write set_definition_query Fija la definition query (filtro SQL) de una capa del data frame activo. Write set_extent Encuadra el data frame activo a unas coordenadas [xmin, ymin, xmax, ymax] (en el Write set_layer_visibility Enciende o apaga una capa (o grupo) por nombre en el data frame activo y refresca. Write set_scale Fija la escala del data frame activo y refresca (ej. 200000 -> 1:200.000). Write set_text_element set_text_element Write set_workspace Fija arcpy.env.workspace (gdb o carpeta) — base para list_feature_classes /

READ 21 tools

Read calculate_geometry calculate_geometry Read count_features Cuenta entidades de una capa. Con where cuenta las que cumplen el filtro SIN Read describe_data Describe un dataset EN DISCO (no necesita estar en el mapa): tipo, CRS, geometría, Read get_arcmap_info Info del documento ArcMap abierto: ruta del .mxd, data frames, escala activa. Read get_canvas_screenshot get_canvas_screenshot Read get_layer_features get_layer_features Read get_layer_info Detalle de una capa: tipo de geometría, CRS, extent, nº de entidades, campos y Read get_unique_values Devuelve los valores únicos (ordenados) de un campo de una capa. Respeta la Read get_workspace Devuelve el workspace y scratch workspace actuales de arcpy.env. Read list_broken_data_sources Lista las capas/tablas con la fuente de datos ROTA (rutas que ArcMap no encuentra, Read list_data_frames Lista los data frames del .mxd (nombre, escala y cuál es el activo). Los mxds de Read list_ddp list_ddp Read list_feature_classes Lista las feature classes de un workspace (incluye las dentro de datasets). Si no Read list_fields Lista los campos de una capa/tabla: nombre, tipo, alias y longitud. Read list_layers Lista las capas del data frame activo (nombre, visibilidad, fuente, def. query). Read list_layout_elements list_layout_elements Read list_rasters Lista los datasets ráster de un workspace (o el fijado por set_workspace). Read list_tables Lista las tablas independientes de un workspace (o el fijado por set_workspace). Read ping Comprueba que el puente dentro de ArcMap responde (y versión de ArcGIS). Read raster_index raster_index Read topographic_profile topographic_profile

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Arcmap

Can an AI agent delete data through the Arcmap MCP server? +

Yes. The Arcmap server exposes 1 destructive tools including remove_layer. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Arcmap? +

The Arcmap server has 17 write tools including add_layer, apply_symbology_from_layer, clear_selection. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Arcmap.

How many tools does the Arcmap MCP server expose? +

48 tools across 4 categories: Destructive, Execute, Read, Write. 21 are read-only. 27 can modify, create, or delete data.

How do I enforce a policy on Arcmap? +

Register the Arcmap MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Arcmap tool call.

Deterministic rules across all 48 Arcmap tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ARCMAP →

Instant setup, no code required.

48 Arcmap tools catalogued and risk-classified — across an index of 43,000+ MCP servers.