// SCAN REPORT

Plane

137 tools. 80 can modify or destroy data without limits.

21 destructive tools with no built-in limits. Policy required.

Last updated: 27 Jun 2026

80 can modify or destroy data

57 read-only

137 tools total

Community server · catalogue entry verified 27/06/2026

How to control Plane ↓

TOOL MAP

What Plane exposes to your agents

Read (57) Write / Execute (59) Destructive / Financial (21)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Plane tools

Destructive · High delete_cycle The tool deletes a cycle resource by its ID, permanently removing it from the system. Destructive · High delete_initiative This tool permanently removes data (an initiative) from the Plane system without the ability to undo the operation. Destructive · High delete_intake_work_item The 'delete' prefix categorizes this as Destructive rather than Write, since deletion is irreversible and cannot be undone through normal operations. Destructive · High delete_label The tool performs an irreversible deletion operation on labels.

80 of Plane's 137 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Plane

PolicyLayer is an MCP gateway — it sits between your AI agents and Plane, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_cycle": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "attach_page_to_work_item": {
    "limits": [
      {
        "counter": "attach_page_to_work_item_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "count_work_items": {
    "limits": [
      {
        "counter": "count_work_items_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Plane — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PLANE →

Instant setup, no code required.

FULL CATALOGUE

All 137 Plane tools

DESTRUCTIVE 21 tools

WRITE 59 tools

Write attach_page_to_work_item Link a page to a work item. Write complete_cycle complete_cycle Write create_cycle create_cycle Write create_initiative create_initiative Write create_intake_work_item Create a new intake work item in a project. Write create_label create_label Write create_milestone create_milestone Write create_module create_module Write create_page create_page Write create_project create_project Write create_project_estimate create_project_estimate Write create_project_estimate_points create_project_estimate_points Write create_state create_state Write create_work_item create_work_item Write create_work_item_comment create_work_item_comment Write create_work_item_link Create a link for a work item. Write create_work_item_property create_work_item_property Write create_work_item_property_option create_work_item_property_option Write create_work_item_relation create_work_item_relation Write create_work_item_relation_definition create_work_item_relation_definition Write create_work_item_type create_work_item_type Write create_work_log create_work_log Write detach_page_from_work_item Remove a page link from a work item. Write import_work_item_types_to_project import_work_item_types_to_project Write link_estimate_to_project Link an estimate to a project, making it the active estimate system. Write manage_cycle_archive manage_cycle_archive Write manage_cycle_work_items manage_cycle_work_items Write manage_milestone_work_items manage_milestone_work_items Write manage_module_archive Archive or unarchive a module. Write manage_module_work_items manage_module_work_items Write manage_project_archive manage_project_archive Write manage_work_item_archive manage_work_item_archive Write manage_work_item_assignee manage_work_item_assignee Write manage_work_item_label manage_work_item_label Write manage_work_item_type_properties manage_work_item_type_properties Write resolve_work_item_type resolve_work_item_type Write set_work_item_property_value set_work_item_property_value Write transfer_cycle_work_items transfer_cycle_work_items Write update_cycle update_cycle Write update_initiative update_initiative Write update_intake_work_item update_intake_work_item Write update_label update_label Write update_milestone update_milestone Write update_module update_module Write update_project update_project Write update_project_estimate update_project_estimate Write update_project_estimate_point update_project_estimate_point Write update_project_features update_project_features Write update_state update_state Write update_work_item update_work_item Write update_work_item_comment update_work_item_comment Write update_work_item_link Update a link for a work item. Write update_work_item_property update_work_item_property Write update_work_item_property_option update_work_item_property_option Write update_work_item_relation_definition update_work_item_relation_definition Write update_work_item_type update_work_item_type Write update_work_log update_work_log Write update_workspace_features update_workspace_features Write upload_work_item_attachment_from_url upload_work_item_attachment_from_url

READ 57 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Plane

Can an AI agent delete data through the Plane MCP server? +

Yes. The Plane server exposes 21 destructive tools including delete_cycle, delete_initiative, delete_intake_work_item. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Plane? +

The Plane server has 59 write tools including attach_page_to_work_item, complete_cycle, create_cycle. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Plane.

How many tools does the Plane MCP server expose? +

137 tools across 4 categories: Destructive, Financial, Read, Write. 57 are read-only. 80 can modify, create, or delete data.

How do I enforce a policy on Plane? +

Register the Plane MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Plane tool call.

Deterministic rules across all 137 Plane tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PLANE →

Instant setup, no code required.

137 Plane tools catalogued and risk-classified — across an index of 43,000+ MCP servers.