// SCAN REPORT

Voog

105 tools. 67 can modify or destroy data without limits.

17 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

67 can modify or destroy data

38 read-only

105 tools total

Community server · catalogue entry verified 29/06/2026

How to control Voog ↓

TOOL MAP

What Voog exposes to your agents

Read (38) Write / Execute (50) Destructive / Financial (17)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Voog tools

Destructive · High cart_rule_delete Deletion of cart rules cannot be undone and directly impacts ecommerce operations (discount rules, promotions, pricing logic). Destructive · High category_delete This tool permanently removes a category from the Voog CMS ecommerce system. Destructive · High discount_delete Deleting a discount is a destructive action that cannot be undone. Destructive · High product_delete The tool performs an irreversible deletion operation on product data in a CMS/ecommerce system.

67 of Voog's 105 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Voog

PolicyLayer is an MCP gateway — it sits between your AI agents and Voog, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "article_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "article_create": {
    "limits": [
      {
        "counter": "article_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "article_get": {
    "limits": [
      {
        "counter": "article_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Voog — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON VOOG →

Instant setup, no code required.

FULL CATALOGUE

All 105 Voog tools

DESTRUCTIVE 17 tools

Destructive article_delete Delete an article. IRREVERSIBLE — Voog does not retain Destructive article_delete_data Delete a single article.data.<key> (DELETE /articles/{id}/data/{key}). Destructive cart_rule_delete Delete a cart rule (DELETE /admin/api/ecommerce/v1/ Destructive category_delete Delete a category (DELETE /admin/api/ecommerce/v1/categories/ Destructive comment_delete Remove a comment (DELETE /articles/{article_id}/comments/{comment_id}). Destructive discount_delete Delete a discount (DELETE /admin/api/ecommerce/v1/discounts/ Destructive element_delete Delete an element (DELETE /elements/{id}). Voog returns Destructive language_delete Remove a language from the site (DELETE /languages/{id}). Destructive layout_asset_delete Delete a layout_asset. IRREVERSIBLE. Refuses without Destructive layout_delete Delete a layout. IRREVERSIBLE — Voog does not retain Destructive page_delete Delete a page. IRREVERSIBLE — Voog does not retain deleted pages. Destructive page_delete_data Delete a single page.data.<key> (DELETE /pages/{id}/data/{key}). Destructive product_delete Delete a product (DELETE /admin/api/ecommerce/v1/products/ Destructive redirect_delete Delete a redirect rule. Refuses without force=true. Destructive site_delete_data Delete site.data.<key> (DELETE /site/data/{key}). Destructive tag_delete Remove a tag (DELETE /tags/{id}). Voog returns 204. Destructive webhook_delete Remove a webhook (DELETE /webhooks/{id}). Voog returns

EXECUTE 2 tools

Execute voog_admin_api_call Generic Admin API passthrough. Forward an HTTP request to Execute voog_ecommerce_api_call Generic Ecommerce v1 API passthrough. Forward an HTTP

WRITE 48 tools

Write article_create Create a new blog article. Required: page_id (the parent Write article_publish Publish an article. Voog only copies autosaved_ → Write article_set_data Set a single article.data.<key> value (PUT /articles/{id}/data/{key}). Write article_update Update an existing article. Title/body/excerpt go to Write asset_replace Rename a layout_asset by creating a new one with the desired Write cart_rule_create Create a cart rule (POST /admin/api/ecommerce/v1/cart_rules). Write cart_rule_update Update a cart rule (PUT /admin/api/ecommerce/v1/cart_rules/ Write category_create Create a category (POST /admin/api/ecommerce/v1/categories). Write category_update Update a category (PUT /admin/api/ecommerce/v1/categories/ Write comment_toggle_spam Flip a comment Write content_partial_update Update a content partial (PUT /content_partials/{id}). Write discount_create Create a discount (POST /admin/api/ecommerce/v1/discounts). Write discount_update Update a discount (PUT /admin/api/ecommerce/v1/discounts/ Write ecommerce_settings_update Update ecommerce settings. attributes: flat root-level Write element_create Create an element (POST /elements). Body is FLAT. Write element_move Re-order or re-parent an element instance Write element_update Update an element (PUT /elements/{id}). Partial — supply Write language_create Add a new language to the Voog site (POST /languages). Write layout_asset_create Create a layout_asset (CSS/JS/image). filename + asset_type Write layout_asset_update Update a layout_asset Write layout_create Create a new layout or component (POST /layouts). Write layout_rename Rename a layout (PUT /layouts/{id} {title}). Reversible — Write layout_update Update a layout — body (Liquid template source), title, Write layouts_pull Fetch every layout + component from /layouts and write per-layout Write layouts_push Read manifest.json + .tpl files from target_dir and PUT each Write media_set_update_asset_titles Safely edit one or more asset titles in a media_set Write node_move Move/reorder a node within the page tree (PUT Write node_relocate Relocate a node to a precise position relative to a Write node_update Update a node Write page_add_content Create a content area + linked text on a page Write page_create Create a new page. Required: title, slug, language_id. Write page_duplicate POST /pages/{id}/duplicate — create a copy of the page Write page_set_data Set a single page.data.<key> value (PUT /pages/{id}/data/{key}). Write page_set_hidden Bulk toggle the hidden flag on one or more pages. Reversible — Write page_set_layout Reassign a page Write page_update Update arbitrary fields on a page. At least one of Write product_create Create a new product (POST /products on ecommerce v1). Write product_duplicate Duplicate a product (POST /admin/api/ecommerce/v1/products/ Write product_set_images Replace a product Write product_update Update a product. Three argument shapes (combinable):\n Write products_bulk_action Apply the same actions to many products in one request Write redirect_add Add a redirect rule. source/destination are paths (e.g. /old → /new). Write redirect_update Update an existing redirect rule. At least one of source, Write site_set_data Set site.data.<key> to a value (PUT /site/data/{key}). Write site_update Update site singleton. attributes: flat root-level fields. Write text_update Update a text body (PUT /texts/{id} {body}). body is the Write webhook_create Create a webhook (POST /webhooks). Body is FLAT — no Write webhook_update Update a webhook (PUT /webhooks/{id}). Partial — supply

READ 38 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Voog

Can an AI agent delete data through the Voog MCP server? +

Yes. The Voog server exposes 17 destructive tools including article_delete, article_delete_data, cart_rule_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Voog? +

The Voog server has 48 write tools including article_create, article_publish, article_set_data. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Voog.

How many tools does the Voog MCP server expose? +

105 tools across 3 categories: Destructive, Read, Write. 38 are read-only. 67 can modify, create, or delete data.

How do I enforce a policy on Voog? +

Register the Voog MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Voog tool call.

Deterministic rules across all 105 Voog tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VOOG →

Instant setup, no code required.

105 Voog tools catalogued and risk-classified — across an index of 43,000+ MCP servers.