// SCAN REPORT

PlexMCP

80 tools. 29 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

29 can modify or destroy data

51 read-only

80 tools total

Community server · catalogue entry verified 30/06/2026

How to control PlexMCP ↓

TOOL MAP

What PlexMCP exposes to your agents

Read (51) Write / Execute (20) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous PlexMCP tools

Destructive · High delete_library This tool performs an irreversible destructive action on structured media data. Destructive · High delete_playlist This tool permanently removes a playlist from the Plex Media Server. Destructive · High delete_quality_profile This tool permanently removes a quality profile, which cannot be undone without manual recreation. Destructive · High delete_user Deleting a user is an irreversible destructive action that cannot be undone without manual intervention or backups.

29 of PlexMCP's 80 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control PlexMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and PlexMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_library": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_library": {
    "limits": [
      {
        "counter": "add_library_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "agentic_plex_workflow": {
    "limits": [
      {
        "counter": "agentic_plex_workflow_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register PlexMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PLEXMCP →

Instant setup, no code required.

FULL CATALOGUE

All 80 PlexMCP tools

DESTRUCTIVE 7 tools

Destructive delete_library Delete a library. Destructive delete_playlist Delete a playlist. Destructive delete_quality_profile Delete a quality profile. Destructive delete_user Delete a Plex user. Destructive empty_trash Empty the trash for a library. Destructive remove_from_playlist Remove items from a playlist. Destructive remove_library_location Remove a location from a library.

EXECUTE 6 tools

Execute control_playback Control playback on a Plex client. Execute optimize_database Optimize the Plex database. Execute optimize_library Optimize a library database. Execute plex_ffmpeg_mgr plex_ffmpeg_mgr Execute refresh_library Refresh metadata for a library. Execute scan_library Trigger a library scan to update content.

WRITE 14 tools

Write add_library Add a new library. Write add_library_location Add a location to a library. Write add_to_playlist Add items to an existing playlist. Write create_playlist Create a new playlist. Write create_quality_profile Create a new quality profile. Write create_user Create a new Plex user. Write fix_media_match Fix an incorrect media match. Write set_stream_quality Set streaming quality settings for a profile. Write set_throttling Configure throttling settings. Write update_library Update a library's settings. Write update_playlist Update an existing playlist. Write update_transcode_settings Update transcode settings for a quality profile. Write update_user Update an existing Plex user. Write update_user_permissions Update permissions for a Plex user.

READ 51 tools

Read agentic_plex_workflow agentic_plex_workflow Read analyze_library Analyze a library for organization issues. Read clean_bundles Clean old bundles for a library or all libraries. Read get_anime_season_info Get information about anime seasons with Vienna-specific metadata. Read get_bandwidth_usage Get bandwidth usage statistics. Read get_european_content Get European content with Vienna-specific metadata. Read get_libraries Get all media libraries available on the Plex server. Read get_library Get information about a specific library. Read get_library_items Get items from a library. Read get_media_info Get detailed information about a specific media item. Read get_playlist Get a specific playlist by ID. Read get_playlist_analytics Get analytics for a specific playlist. Read get_plex_status get_plex_status Read get_recently_added get_recently_added Read get_server_info Get comprehensive information about the Plex server. Read get_server_status Get the current status of the Plex server. Read get_throttling_status Get current throttling status and settings. Read get_transcode_settings Get current transcode settings for a quality profile. Read get_transcoding_status Get current transcoding status. Read get_user Get a specific Plex user by ID. Read get_vienna_recommendations Get Vienna-specific content recommendations. Read list_clients Get a list of all available Plex clients. Read list_libraries List all libraries. Read list_playlists List all playlists. Read list_quality_profiles List all available quality profiles. Read list_sessions Get a list of all active Plex sessions. Read list_users List all Plex users. Read organize_library Organize a Plex library according to best practices. Read plex_audio_mgr plex_audio_mgr Read plex_collections plex_collections Read plex_help plex_help Read plex_integration plex_integration Read plex_library plex_library Read plex_media plex_media Read plex_media_enrichment plex_media_enrichment Read plex_metadata plex_metadata Read plex_natural_assistant plex_natural_assistant Read plex_organization plex_organization Read plex_performance plex_performance Read plex_playlist plex_playlist Read plex_quality plex_quality Read plex_rag plex_rag Read plex_reporting plex_reporting Read plex_search plex_search Read plex_server plex_server Read plex_streaming plex_streaming Read plex_user plex_user Read refresh_metadata Refresh metadata for an item or library. Read search_media search_media Read show_api_docs show_api_docs Read test_connection Test basic Plex connection and return server info

OTHER 2 tools

Other arr_stack arr_stack Other my_tool my_tool

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about PlexMCP

Can an AI agent delete data through the Plex MCP server? +

Yes. The PlexMCP server exposes 7 destructive tools including delete_library, delete_playlist, delete_quality_profile. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through PlexMCP? +

The PlexMCP server has 14 write tools including add_library, add_library_location, add_to_playlist. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach PlexMCP.

How many tools does the Plex MCP server expose? +

80 tools across 4 categories: Destructive, Execute, Read, Write. 51 are read-only. 29 can modify, create, or delete data.

How do I enforce a policy on PlexMCP? +

Register the Plex MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every PlexMCP tool call.

Deterministic rules across all 80 PlexMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PLEXMCP →

Instant setup, no code required.

80 PlexMCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.