// SCAN REPORT

Plane

56 tools. 33 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

33 can modify or destroy data

23 read-only

56 tools total

Community server · catalogue entry verified 02/07/2026

How to control Plane ↓

TOOL MAP

What Plane exposes to your agents

Read (23) Write / Execute (26) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Plane tools

Destructive · High plane-asset-delete This tool permanently removes uploaded assets from the workspace with no undo mechanism. Destructive · High plane-cycle-remove-issue Removing an issue from a cycle is a destructive action that breaks the association between the issue and the cycle. Destructive · High plane-label-delete The tool performs an irreversible deletion operation on project metadata (labels). Destructive · High plane-page-delete The tool permanently deletes a page from a project.

33 of Plane's 56 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Plane

PolicyLayer is an MCP gateway — it sits between your AI agents and Plane, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "plane-asset-delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "plane-asset-upload": {
    "limits": [
      {
        "counter": "plane-asset-upload_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "plane-auth-status": {
    "limits": [
      {
        "counter": "plane-auth-status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Plane — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PLANE →

Instant setup, no code required.

FULL CATALOGUE

All 56 Plane tools

DESTRUCTIVE 7 tools

Destructive plane-asset-delete Delete an uploaded asset from the workspace. Destructive plane-cycle-remove-issue Remove an issue from a cycle. Destructive plane-label-delete Delete a label from a project. Destructive plane-page-delete Delete a page from a project. Destructive plane-project-member-remove Remove a member from a project. Destructive plane-work-item-delete Delete a work item. Destructive plane-workspace-invitation-delete Delete/revoke a pending workspace invitation.

WRITE 26 tools

Write plane-asset-upload Upload a file to Plane and get an asset UUID back. Supports local file paths or base64 data. The returned asse Write plane-cycle-add-issues Add issues to a cycle. Write plane-cycle-create Create a new cycle (sprint) in a project. Write plane-instance-config-update Update instance configuration keys. Pass key-value pairs. Example keys: ENABLE_SIGNUP, ENABLE_MAGIC_LINK_LOGIN Write plane-instance-update Update instance settings (name, domain, telemetry). Requires admin access. Write plane-label-create Create a new label in a project. Write plane-module-add-issues Add issues to a module. Write plane-module-create Create a new module in a project. Write plane-module-remove-issue Remove an issue from a module. Write plane-page-append-content Append content to the end of an existing page without replacing existing content. Accepts markdown (default) o Write plane-page-create Create a new page with optional content in one call. Accepts markdown (default) or HTML. Markdown is auto-conv Write plane-page-insert-image Insert an already-uploaded image asset into a page. Generates the proper <image-component> element and appends Write plane-page-set-content Replace the entire page body. Accepts markdown (default) or HTML. Markdown is auto-converted to Plane-formatte Write plane-page-update Update page metadata (title, access level). Write plane-project-create Create a new project in the workspace. Write plane-project-member-add Add an existing workspace member to a project. The user must already be a workspace member (accepted invite). Write plane-project-update Update project settings (name, description, network). Write plane-state-create Create a new workflow state in a project. Write plane-user-profile-update Update the current user profile (display name, theme preferences). Write plane-work-item-comment-add Add a comment to a work item. Accepts markdown (default) or HTML. Write plane-work-item-create Create a new work item (issue). Description accepts markdown (default) or HTML. Write plane-work-item-link-add Add a URL link to a work item. Write plane-work-item-update Update a work item. Only include fields you want to change. Write plane-workspace-invite Invite a user to the workspace by email. They must accept the invite before they can be added to projects. Rol Write plane-workspace-logo-upload Upload a new workspace logo. Accepts a local file path. Uses the presigned upload flow with entity_type WORKSP Write plane-workspace-update Update workspace settings (name, organization_size, timezone).

READ 23 tools

Read plane-auth-status Check authentication status for both v1 API key and session-based auth. Useful for debugging connection issues Read plane-cycle-detail Get details of a specific cycle. Read plane-cycle-list List all cycles (sprints) in a project. Read plane-instance-config-get Get all instance configuration keys (auth providers, SMTP, AI, etc). Requires admin access. Categories: AUTHEN Read plane-instance-get Get instance settings (name, version, edition, domain, auth config). Requires admin access. Read plane-label-list List all labels in a project. Read plane-member-list List all members of a project. Read plane-module-detail Get details of a specific module. Read plane-module-list List all modules in a project. Modules group related issues together. Read plane-page-detail Get page metadata AND readable HTML content. Returns the page object with description_html (the actual content Read plane-page-get-content Get the readable HTML content of a page. Returns the description_html field from the page model (NOT the Yjs b Read plane-page-list List all pages in a project. Read plane-project-detail Get details of a specific project. Read plane-project-list List all projects in the workspace. Read plane-state-list List all workflow states in a project (Backlog, Todo, In Progress, Done, Cancelled). Read plane-user-profile-get Get the current user profile (display name, avatar, theme, onboarding state). Read plane-work-item-activity Get the activity history of a work item (state changes, assignments, comments, etc.). Read plane-work-item-comment-list List all comments on a work item. Read plane-work-item-detail Get full details of a work item including description, comments count, and relationships. Read plane-work-item-list List work items (issues) in a project with optional filters. Read plane-workspace-get Get workspace settings (name, slug, logo, organization_size, timezone). Read plane-workspace-invitation-list List pending workspace invitations. Read plane-workspace-member-list List all members of the workspace.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Plane

Can an AI agent delete data through the Plane MCP server? +

Yes. The Plane server exposes 7 destructive tools including plane-asset-delete, plane-cycle-remove-issue, plane-label-delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Plane? +

The Plane server has 26 write tools including plane-asset-upload, plane-cycle-add-issues, plane-cycle-create. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Plane.

How many tools does the Plane MCP server expose? +

56 tools across 3 categories: Destructive, Read, Write. 23 are read-only. 33 can modify, create, or delete data.

How do I enforce a policy on Plane? +

Register the Plane MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Plane tool call.

Deterministic rules across all 56 Plane tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PLANE →

Instant setup, no code required.

56 Plane tools catalogued and risk-classified — across an index of 43,000+ MCP servers.