// SCAN REPORT

Severalnines CCX MCP Server

30 tools. 15 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

15 can modify or destroy data

15 read-only

30 tools total

Community server · catalogue entry verified 03/07/2026

How to control Severalnines CCX MCP Server ↓

TOOL MAP

What Severalnines CCX MCP Server exposes to your agents

Read (15) Write / Execute (9) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Severalnines CCX MCP Server tools

Destructive · Critical ccx_delete_database This tool deletes database objects, which is an irreversible destructive action. Destructive · Critical ccx_delete_datastore This tool permanently removes a datastore, which is an irreversible action that destroys data and infrastructure. Destructive · High ccx_delete_db_user This tool deletes database users, which is an irreversible operation that cannot be undone. Destructive · High ccx_delete_firewall_rule This tool permanently removes firewall rules that cannot be automatically restored.

15 of Severalnines CCX MCP Server's 30 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Severalnines CCX MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Severalnines CCX MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "ccx_delete_database": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ccx_add_node": {
    "limits": [
      {
        "counter": "ccx_add_node_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ccx_get_connection_string": {
    "limits": [
      {
        "counter": "ccx_get_connection_string_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Severalnines CCX MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SEVERALNINES CCX →

Instant setup, no code required.

FULL CATALOGUE

All 30 Severalnines CCX MCP Server tools

DESTRUCTIVE 6 tools

Destructive ccx_delete_database Delete a database from a CCX datastore. This is DESTRUCTIVE and cannot be undone. Blocked by protection mode ( Destructive ccx_delete_datastore Delete a CCX datastore. This is DESTRUCTIVE and cannot be undone. You must set confirm to true. Blocked by pro Destructive ccx_delete_db_user Delete a database user from a CCX datastore. This is DESTRUCTIVE and may break applications using this user. Y Destructive ccx_delete_firewall_rule Remove a trusted source (firewall rule) from a CCX datastore. This is DESTRUCTIVE and may lock out application Destructive ccx_delete_parameter_group Delete a parameter group. This is DESTRUCTIVE and cannot be undone. You must set confirm to true. Blocked by p Destructive ccx_restore_backup Restore a CCX datastore from a backup. This is a DESTRUCTIVE operation that replaces current data with the bac

EXECUTE 2 tools

Execute ccx_apply_parameter_group Apply a parameter group to a datastore. This creates a job on the cluster to update its database configuration Execute ccx_scale_datastore Scale a CCX datastore by resizing the instance (CPU/RAM) or expanding storage. Use this when a database needs

WRITE 7 tools

Write ccx_add_node Add a new node to a CCX datastore (horizontal scale-out). The new node will be provisioned with the same or sp Write ccx_create_database Create a new database on a CCX datastore Write ccx_create_datastore Create a new CCX database cluster. Requires db_vendor, cloud_provider, and cloud_region. All other options hav Write ccx_create_db_user Create a new database user on a CCX datastore Write ccx_create_firewall_rule Add a trusted source (firewall rule) to a CCX datastore. Allows the specified CIDR to connect to the database. Write ccx_create_parameter_group Create a new parameter group (database configuration template). Use ccx_list_default_parameters first to see a Write ccx_update_parameter_group Update a parameter group

READ 15 tools

Read ccx_get_connection_string Get connection strings for a CCX datastore. Returns URI, CLI command, JDBC, and environment variable formats. Read ccx_get_datastore Get detailed information about a specific CCX datastore including credentials, status, and current job progres Read ccx_get_nodes Get the list of nodes for a specific CCX datastore, including their roles, status, and IP addresses Read ccx_get_parameter_group Get a single parameter group with its full list of parameters. Use this to inspect the current configuration v Read ccx_get_stats Get performance metrics for a CCX datastore. Use this to check database health, diagnose performance issues, o Read ccx_get_top_queries Get the slowest queries running on a CCX datastore, ranked by total execution time. Use this to diagnose perfo Read ccx_list_backups List available backups for a CCX datastore. Use this to check backup history, find a backup to restore, or ver Read ccx_list_clouds List available cloud providers and their regions for deploying CCX database clusters Read ccx_list_databases List databases on a specific CCX datastore Read ccx_list_datastores List all CCX database clusters (datastores) with their status, vendor, and cloud provider Read ccx_list_db_users List database users for a specific CCX datastore Read ccx_list_default_parameters Get the default database parameters for a specific vendor and version. Useful before creating a parameter grou Read ccx_list_firewall_rules List trusted sources (firewall rules) for a CCX datastore. Shows which CIDRs are allowed to connect. Read ccx_list_parameter_groups List all parameter groups (database configuration templates). Optionally filter by database vendor, version, o Read ccx_list_plans List available instance sizes, volume types, and volume sizes for a specific cloud provider

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Severalnines CCX MCP Server

Can an AI agent delete data through the Severalnines CCX MCP Server MCP server? +

Yes. The Severalnines CCX MCP Server server exposes 6 destructive tools including ccx_delete_database, ccx_delete_datastore, ccx_delete_db_user. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Severalnines CCX MCP Server? +

The Severalnines CCX MCP Server server has 7 write tools including ccx_add_node, ccx_create_database, ccx_create_datastore. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Severalnines CCX MCP Server.

How many tools does the Severalnines CCX MCP Server MCP server expose? +

30 tools across 4 categories: Destructive, Execute, Read, Write. 15 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on Severalnines CCX MCP Server? +

Register the Severalnines CCX MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Severalnines CCX MCP Server tool call.

Deterministic rules across all 30 Severalnines CCX MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SEVERALNINES CCX →

Instant setup, no code required.

30 Severalnines CCX MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.