// SCAN REPORT

Virtualization

56 tools. 29 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

29 can modify or destroy data

27 read-only

56 tools total

Community server · catalogue entry verified 12/06/2026

How to control Virtualization ↓

TOOL MAP

What Virtualization exposes to your agents

Read (27) Write / Execute (21) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Virtualization tools

Destructive · High delete_snapshot Snapshot deletion is an irreversible operation. Destructive · High delete_vm delete_vm removes virtual machines, which is an irreversible destructive action. Destructive · High RestoreSnapshot Restoring a VM to a previous snapshot irreversibly discards all changes made to the VM after that snapshot was taken, including data, configurations, and state. Destructive · Critical virtualization-mcp_shutdown Shutting down the virtualization server is irreversible in the sense that it terminates the entire server process, disrupting all managed VMs, sandboxes, and dev environments.

29 of Virtualization's 56 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Virtualization

PolicyLayer is an MCP gateway — it sits between your AI agents and Virtualization, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_snapshot": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "MountIso": {
    "limits": [
      {
        "counter": "mountiso_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "example_counter": {
    "limits": [
      {
        "counter": "example_counter_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Virtualization — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON VIRTUALIZATION →

Free to start. No card required.

FULL CATALOGUE

All 56 Virtualization tools

DESTRUCTIVE 4 tools

Destructive delete_snapshot delete_snapshot Destructive delete_vm delete_vm Destructive virtualization-mcp_shutdown Shut down the virtualization-mcp server Destructive RestoreSnapshot Restore a virtual machine to a previous snapshot.

EXECUTE 12 tools

Execute start_hyperv_vm start_hyperv_vm Execute start_vm start_vm Execute stop_hyperv_vm stop_hyperv_vm Execute stop_sandbox stop_sandbox Execute stop_vm stop_vm Execute hyperv_management hyperv_management Execute network_management network_management Execute snapshot_management snapshot_management Execute vm_agentic_workflow vm_agentic_workflow Execute vm_management vm_management Execute create_sandbox create_sandbox Execute create_windows_sandbox create_windows_sandbox

WRITE 9 tools

Write MountIso Mount an ISO file to a virtual machine Write storage_management storage_management Write UnmountIso Unmount an ISO from a virtual machine Write attach_disk Attach a disk to a VM. Write ConfigureNetworkAdapter Configure a network adapter for a virtual machine. Write create_disk Create a new virtual disk. Write create_snapshot create_snapshot Write create_vm create_vm Write modify_vm Modify VM settings.

READ 27 tools

Read example_counter A simple counter that increments on each call Read get_api_docs Get OpenAPI documentation for all available API endpoints Read get_api_endpoints Get detailed information about all available API endpoints and tools Read get_help Get help with virtualization-mcp commands and features Read get_hyperv_vm get_hyperv_vm Read get_tool_categories Get a list of all available tool categories Read get_tool_info Get detailed information about a specific tool by name Read get_tool_schema get_tool_schema Read get_vm_screenshot Take a screenshot of a running VM. Read get_vm_state Get the current state of a virtual machine. Read GetSystemInfo Get information about the host system and VirtualBox installation. Read GetVmMetrics Get performance metrics for a running virtual machine. Read info_tools info_tools Read list_common_programs list_common_programs Read list_hyperv_vms list_hyperv_vms Read list_portfolios list_portfolios Read list_running_sandboxes list_running_sandboxes Read list_sandboxes List all running Windows Sandbox instances. Read list_snapshots list_snapshots Read list_tools list_tools Read ListIsos List all available ISO files in the VirtualBox media library. Read ListNetworkAdapters List network adapters for a virtual machine. Read ListStorageControllers List storage controllers for a virtual machine. Read ListVms List all VirtualBox virtual machines with their current states. Read name name Read virtualization-mcp_list_tools List all available tools Read virtualization-mcp_ping Check if the virtualization-mcp server is running

OTHER 4 tools

Other example_hello A simple example tool that says hello Other sandbox_management sandbox_management Other system_management system_management Other tool_name tool_name

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Virtualization

Can an AI agent delete data through the Virtualization MCP server? +

Yes. The Virtualization server exposes 4 destructive tools including delete_snapshot, delete_vm, virtualization-mcp_shutdown. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Virtualization? +

The Virtualization server has 9 write tools including MountIso, storage_management, UnmountIso. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Virtualization.

How many tools does the Virtualization MCP server expose? +

56 tools across 4 categories: Destructive, Execute, Read, Write. 27 are read-only. 29 can modify, create, or delete data.

How do I enforce a policy on Virtualization? +

Register the Virtualization MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Virtualization tool call.

Deterministic rules across all 56 Virtualization tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VIRTUALIZATION →

Free to start. No card required.

56 Virtualization tools catalogued and risk-classified — across an index of 43,000+ MCP servers.