// SCAN REPORT

ArcGIS MCP

157 tools. 65 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated:

65 can modify or destroy data
92 read-only
157 tools total

Community server · catalogue entry verified 02/07/2026

How to control ArcGIS MCP ↓

TOOL MAP

What ArcGIS MCP exposes to your agents

Read (92) Write / Execute (57) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous ArcGIS MCP tools

Destructive · Critical fl_delete_by_query The 'delete' operation in the name combined with 'by_query' suggests this tool permanently removes feature layer records matching criteria. Destructive · High fl_delete_fields Deleting fields from a feature layer is an irreversible destructive action that alters the underlying data schema. Destructive · Critical flc_truncate Truncate operations irreversibly delete data in bulk and cannot be undone. Destructive · High item_delete Delete operations are inherently destructive and cannot be undone.

65 of ArcGIS MCP's 157 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ArcGIS MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and ArcGIS MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "fl_delete_by_query": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "arcgis_auth_connect": {
    "limits": [
      {
        "counter": "arcgis_auth_connect_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "admin_licenses": {
    "limits": [
      {
        "counter": "admin_licenses_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register ArcGIS MCP — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON ARCGIS →

Instant setup, no code required.

FULL CATALOGUE

All 157 ArcGIS MCP tools

DESTRUCTIVE 8 tools
Destructive fl_delete_by_query fl_delete_by_query Destructive fl_delete_fields fl_delete_fields Destructive flc_truncate flc_truncate Destructive item_delete item_delete Destructive portal_logs_clean portal_logs_clean Destructive server_logs_clean Limpia todos los logs del ArcGIS Server. OPERACIÓN DE ESCRITURA. Destructive webhook_delete Elimina un webhook del portal Enterprise. OPERACIÓN DE ESCRITURA. Destructive webmap_remove_layer webmap_remove_layer
EXECUTE 16 tools
Execute admin_reindex admin_reindex Execute batch_geocode batch_geocode Execute enrich_areas enrich_areas Execute fl_calculate fl_calculate Execute geocode geocode Execute geometry_buffer geometry_buffer Execute geometry_project geometry_project Execute geometry_simplify geometry_simplify Execute get_dynamic_gis Obtiene: modulo, clase, propiedad o función dinámicamente usando ArcGIS API for Python. Execute gp_run gp_run Execute gp_run_async gp_run_async Execute gp_run_with_env gp_run_with_env Execute notebook_execute notebook_execute Execute server_service_restart server_service_restart Execute server_service_start Inicia un servicio detenido en ArcGIS Server. OPERACIÓN DE ESCRITURA. Execute server_service_stop Detiene un servicio en ArcGIS Server. OPERACIÓN DE ESCRITURA.
WRITE 41 tools
Write arcgis_auth_connect arcgis_auth_connect Write arcgis_auth_save_profile arcgis_auth_save_profile Write fc_to_feature_layer fc_to_feature_layer Write feature_update feature_update Write fl_add_field fl_add_field Write fl_append fl_append Write fl_attachment_add fl_attachment_add Write fl_create_view fl_create_view Write fl_edit fl_edit Write flc_update_definition flc_update_definition Write group_add_users Agrega usuarios a un grupo. OPERACIÓN DE ESCRITURA. Write group_create Crea un grupo nuevo en el portal. OPERACIÓN DE ESCRITURA. Write group_remove_users Remueve usuarios de un grupo. OPERACIÓN DE ESCRITURA. Write group_update group_update Write item_add_comment item_add_comment Write item_clone item_clone Write item_export item_export Write item_move Mueve un item a una carpeta del portal. OPERACIÓN DE ESCRITURA. Write item_protect Protege un item contra eliminación accidental. OPERACIÓN DE ESCRITURA. Write item_publish item_publish Write item_reassign item_reassign Write item_share item_share Write item_unprotect Remueve la protección contra eliminación de un item. OPERACIÓN DE ESCRITURA. Write item_update item_update Write portal_logs_settings_update portal_logs_settings_update Write share_bulk_set_access share_bulk_set_access Write share_group_add share_group_add Write share_group_copy share_group_copy Write share_group_remove Quita un item de un grupo via SharingGroupManager. OPERACIÓN DE ESCRITURA. Write share_group_replace share_group_replace Write share_set_access share_set_access Write table_edit table_edit Write user_create Crea un usuario built-in. ESCRITURA con dry_run=True por defecto. Write user_disable Desactiva la cuenta de un usuario. OPERACIÓN DE ESCRITURA. Write user_enable Activa la cuenta de un usuario previamente desactivado. OPERACIÓN DE ESCRITURA. Write user_set_role user_set_role Write user_update user_update Write webhook_create webhook_create Write webmap_add_layer webmap_add_layer Write webmap_create webmap_create Write webmap_update_layer webmap_update_layer
READ 92 tools
Read admin_licenses Consulta disponibilidad de licencias de ArcGIS Pro. Read admin_org_settings admin_org_settings Read admin_servers_list Muestra URLs de los servidores federados. Read admin_services_health Identifica servicios de mapas o geoprocesamiento detenidos. Read admin_system_info admin_system_info Read arcgis_auth_status Muestra el estado de la conexión GIS activa. Read arcgis_docs_get arcgis_docs_get Read arcgis_docs_list arcgis_docs_list Read arcgis_docs_modules arcgis_docs_modules Read arcgis_docs_search arcgis_docs_search Read content_find_large Busca items que consumen más de min_mb MB de espacio. Read content_search Busca items en el portal. Read enrich_countries Lista los países disponibles para GeoEnrichment. Read enrich_data_collections enrich_data_collections Read fc_describe fc_describe Read fc_query fc_query Read feature_get feature_get Read feature_get_value Obtiene el valor de un campo específico de un Feature por ObjectID. Read fl_attachments_list fl_attachments_list Read fl_capabilities fl_capabilities Read fl_fields Lista todos los campos de un FeatureLayer con nombre, tipo y alias. Read fl_query_advanced fl_query_advanced Read fl_related_records fl_related_records Read fl_view_list fl_view_list Read flc_describe flc_describe Read fset_from_query fset_from_query Read fset_statistics fset_statistics Read fset_to_geojson fset_to_geojson Read geocode_suggest geocode_suggest Read geometry_area_length geometry_area_length Read get_gis_con Obtiene la instancia de la conexión GIS. Read gis_properties Retorna propiedades generales del portal (GIS). Read gis_version Retorna la versión del portal ArcGIS (Online o Enterprise). Read gp_data_file gp_data_file Read gp_discover Descubre los tools disponibles en un GP Service y sus parámetros. Read gp_linear_unit gp_linear_unit Read gp_raster_data gp_raster_data Read gp_search_services gp_search_services Read gp_service_info gp_service_info Read gp_tool_help gp_tool_help Read group_content Lista todos los items compartidos en un grupo. Read group_get Obtiene información detallada de un grupo por su ID. Read group_list Lista grupos de la organización. Read group_members Lista los miembros de un grupo por su ID. Read image_server_services_list Lista servicios publicados en el Image Server federado. Read item_dependent_to item_dependent_to Read item_dependent_upon item_dependent_upon Read item_download item_download Read item_get item_get Read item_get_data item_get_data Read item_layers Lista todas las capas y tablas de un item de servicio. Read item_metadata Obtiene la metadata completa de un item en formato JSON o XML. Read item_related_items item_related_items Read item_resources Lista los recursos (archivos adjuntos) de un item del portal. Read item_thumbnail item_thumbnail Read mil_info mil_info Read mil_query mil_query Read mil_sublayers mil_sublayers Read notebook_list notebook_list Read org_credits org_credits Read org_usage org_usage Read portal_logs_query portal_logs_query Read portal_logs_settings Lee la configuración actual de logs del portal Enterprise. Read reverse_geocode reverse_geocode Read server_list Lista todos los ArcGIS Servers federados en el Enterprise. Read server_logs_query server_logs_query Read server_machine_hardware server_machine_hardware Read server_machines_list Lista las máquinas registradas en el ArcGIS Server site. Read server_ping_all server_ping_all Read server_service_manifest server_service_manifest Read server_service_status server_service_status Read server_services_directory_list server_services_directory_list Read server_services_folders Lista las carpetas del Services Directory del ArcGIS Server. Read server_services_health_all server_services_health_all Read server_services_list server_services_list Read share_audit_by_owner share_audit_by_owner Read share_audit_public share_audit_public Read share_get_access Obtiene el nivel de acceso actual de un item via SharingManager. Read share_group_audit share_group_audit Read share_group_list Lista todos los grupos con los que está compartido un item via SharingGroupManager. Read share_status Muestra el estado completo de compartición de un item. Read table_fields Lista los campos de una tabla no espacial. Read table_query table_query Read user_content Lista todo el contenido de un usuario. Read user_get Obtiene información detallada de un usuario por su nombre de usuario. Read user_list Lista usuarios de la organización. Read webhook_list Lista todos los webhooks configurados en el portal Enterprise. Read webmap_get webmap_get Read webmap_layers webmap_layers Read webscene_get webscene_get Read webscene_layers webscene_layers Read whoami Identidad, plataforma, versión y privilegios de la sesión.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about ArcGIS MCP

Can an AI agent delete data through the ArcGIS MCP server? +

Yes. The ArcGIS MCP server exposes 8 destructive tools including fl_delete_by_query, fl_delete_fields, flc_truncate. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ArcGIS MCP? +

The ArcGIS MCP server has 41 write tools including arcgis_auth_connect, arcgis_auth_save_profile, fc_to_feature_layer. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ArcGIS MCP.

How many tools does the ArcGIS MCP server expose? +

157 tools across 4 categories: Destructive, Execute, Read, Write. 92 are read-only. 65 can modify, create, or delete data.

How do I enforce a policy on ArcGIS MCP? +

Register the ArcGIS MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ArcGIS MCP tool call.

Deterministic rules across all 157 ArcGIS MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ARCGIS →

Instant setup, no code required.

157 ArcGIS MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.