// SCAN REPORT

Mcp Cloudron

36 tools. 17 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 1 Jul 2026

17 can modify or destroy data

19 read-only

36 tools total

Community server · catalogue entry verified 01/07/2026

How to control Mcp Cloudron ↓

TOOL MAP

What Mcp Cloudron exposes to your agents

Read (19) Write / Execute (14) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Mcp Cloudron tools

Destructive · Critical cloudron_delete_user This tool irreversibly deletes user accounts from a Cloudron instance, which is an unrecoverable operation. Destructive · High cloudron_uninstall_app This tool permanently removes an application from a Cloudron instance, which is an irreversible action. Destructive · Critical cloudron_restore_app The tool explicitly warns it is a destructive operation that replaces current application data with backup data. Execute · High cloudron_cancel_task Cancelling a running async operation is an irreversible action that terminates an in-progress task (e.g., backup, update, migration).

17 of Mcp Cloudron's 36 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mcp Cloudron

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Cloudron, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "cloudron_delete_user": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "cloudron_backup_app": {
    "limits": [
      {
        "counter": "cloudron_backup_app_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "cloudron_check_storage": {
    "limits": [
      {
        "counter": "cloudron_check_storage_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mcp Cloudron — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP CLOUDRON →

Instant setup, no code required.

FULL CATALOGUE

All 36 Mcp Cloudron tools

DESTRUCTIVE 3 tools

Destructive cloudron_delete_user Delete a user from the Cloudron instance. WARNING: This is a destructive operation. Use cloudron_validate_oper Destructive cloudron_restore_app Restore an application from a backup. DESTRUCTIVE OPERATION - current app data will be replaced. Performs pre- Destructive cloudron_uninstall_app Uninstall an application with pre-flight safety validation. DESTRUCTIVE OPERATION. First validates via cloudro

EXECUTE 6 tools

Execute cloudron_apply_update Apply available Cloudron platform update. DESTRUCTIVE OPERATION - services will restart during update. Perform Execute cloudron_cancel_task Cancel a running async operation (kill switch). Returns updated task status with state Execute cloudron_control_app Control app lifecycle (start, stop, restart). Returns 202 Accepted with task ID for async operation tracking v Execute cloudron_install_app Install application from Cloudron App Store with pre-flight validation. Calls F23a (cloudron_validate_manifest Execute cloudron_repair_app Repair a broken application. Attempts automatic repair of apps in error state. Use when an app is unhealthy or Execute cloudron_update_app Update an application to a newer version. Performs pre-flight validation to check app exists and is in install

WRITE 8 tools

Write cloudron_backup_app Create a backup of a specific application. Performs pre-flight storage check (requires 5GB minimum). Returns t Write cloudron_clone_app Clone an existing application to a new location. Creates a duplicate of the app with its data and configuratio Write cloudron_configure_app Update application configuration including environment variables, memory limits, and access control settings. Write cloudron_create_backup Create a new backup of the Cloudron instance. Performs F36 pre-flight storage check (requires 5GB minimum). Re Write cloudron_create_group Create a new group on the Cloudron instance. Groups can be used for access control and user organization. Write cloudron_create_user Create a new user on the Cloudron instance with email, password, and role in a single atomic operation. Passwo Write cloudron_scaffold_package Generate a complete Cloudron package scaffold with all required files (CloudronManifest.json, Dockerfile, star Write cloudron_update_user Update an existing user\

READ 19 tools

Read cloudron_check_storage Check available disk space before operations that create data (backup, install). Returns available/total/used Read cloudron_check_updates Check if Cloudron platform updates are available. Returns update information including availability, version, Read cloudron_fetch_package_example Fetch real package examples from git.cloudron.io. Finds the repository for a given App Store ID and returns th Read cloudron_get_app Get detailed information about a specific application by its ID. Read cloudron_get_logs Get logs for an app or service. Logs are formatted with timestamps and severity levels for readability. Type p Read cloudron_get_status Get the current status and configuration of the Cloudron instance. Read cloudron_get_user Get detailed information about a specific user by user ID. Returns user object with email, username, display n Read cloudron_list_apps List all installed applications on the Cloudron instance. Returns app details including name, domain, status, Read cloudron_list_backups List all backups available on the Cloudron instance. Returns backup details including ID, timestamp, size, app Read cloudron_list_domains List all configured domains on the Cloudron instance. Returns domain details including name, provider, verific Read cloudron_list_groups List all groups on the Cloudron instance. Returns group details including ID, name, and creation date. Groups Read cloudron_list_services List all platform services (read-only diagnostics). Returns status of Cloudron infrastructure services like da Read cloudron_list_users List all users on the Cloudron instance. Returns user details including ID, email, username, role, and creatio Read cloudron_packaging_guide Get interactive, topic-specific guidance for creating Cloudron packages. Provides documentation, best practice Read cloudron_search_apps Search the Cloudron App Store for available applications. Returns app details including name, description, ver Read cloudron_task_status Get the status of an async operation (backup, install, restore, etc.) by task ID. Returns state (pending/runni Read cloudron_validate_manifest Validate app manifest before installation (pre-flight safety check). Checks storage sufficiency via F36, depen Read cloudron_validate_operation Pre-flight validation for destructive operations (uninstall app, delete user, restore backup). Returns validat Read cloudron_validate_package Validate Cloudron package files (CloudronManifest.json, Dockerfile, start.sh) for errors and best practices. R

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mcp Cloudron

Can an AI agent delete data through the Mcp Cloudron MCP server? +

Yes. The Mcp Cloudron server exposes 3 destructive tools including cloudron_delete_user, cloudron_restore_app, cloudron_uninstall_app. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mcp Cloudron? +

The Mcp Cloudron server has 8 write tools including cloudron_backup_app, cloudron_clone_app, cloudron_configure_app. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Cloudron.

How many tools does the Mcp Cloudron MCP server expose? +

36 tools across 4 categories: Destructive, Execute, Read, Write. 19 are read-only. 17 can modify, create, or delete data.

How do I enforce a policy on Mcp Cloudron? +

Register the Mcp Cloudron MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mcp Cloudron tool call.

Deterministic rules across all 36 Mcp Cloudron tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP CLOUDRON →

Instant setup, no code required.

36 Mcp Cloudron tools catalogued and risk-classified — across an index of 43,000+ MCP servers.