// SCAN REPORT

Multi-Tool MCP Server

61 tools. 27 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

27 can modify or destroy data

34 read-only

61 tools total

Community server · catalogue entry verified 04/07/2026

How to control Multi-Tool MCP Server ↓

TOOL MAP

What Multi-Tool MCP Server exposes to your agents

Read (34) Write / Execute (24) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Multi-Tool MCP Server tools

Destructive · High delete_note This tool irreversibly removes data (notes) from the active vault, matching the Destructive category definition. Destructive · High jupyter_delete_notebook The tool performs an irreversible deletion operation on files/notebooks. Destructive · High jupyter_delete_session This tool destroys state by terminating a kernel session. Execute · High ansible_run_adhoc This tool executes arbitrary commands and shell operations on potentially multiple remote hosts through Ansible.

27 of Multi-Tool MCP Server's 61 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Multi-Tool MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Multi-Tool MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_note": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "append_to_note": {
    "limits": [
      {
        "counter": "append_to_note_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ansible_compliance_report": {
    "limits": [
      {
        "counter": "ansible_compliance_report_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Multi-Tool MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MULTI-TOOL →

Instant setup, no code required.

FULL CATALOGUE

All 61 Multi-Tool MCP Server tools

DESTRUCTIVE 3 tools

Destructive delete_note Delete a note (moves to .trash folder) Destructive jupyter_delete_notebook Delete a Jupyter notebook or file Destructive jupyter_delete_session Delete a notebook session (stops the associated kernel)

EXECUTE 15 tools

Execute ansible_ping Test Ansible connectivity to hosts or groups using the ping module. Execute ansible_run_adhoc Run an ad-hoc Ansible command against hosts. Supports ping, setup (facts), command, shell, and Cisco IOS modul Execute ansible_run_playbook Run an Ansible playbook on the RHEL 10 control node. Supports --limit, --tags, --check, --diff, and extra vars Execute jupyter_create_session Create a new session for a notebook (starts a kernel attached to the notebook) Execute jupyter_execute_cell Execute a specific cell in a notebook and return the output. This runs the cell through the Jupyter session. Execute jupyter_interrupt_kernel Interrupt a running Jupyter kernel (stop current execution) Execute jupyter_restart_kernel Restart a running Jupyter kernel Execute jupyter_start_kernel Start a new Jupyter kernel Execute jupyter_stop_kernel Stop/shutdown a running Jupyter kernel Execute run_command Run a whitelisted system command. Free-form: uptime, hostname, df, free, top, ps, who, date, uname, lsblk, lsc Execute unifi_block_client Block a client from accessing the network Execute unifi_reconnect_client Force a client to disconnect and reconnect to the network Execute unifi_restart_device Restart a UniFi device (access point, switch, etc.) Execute unifi_set_dns_filtering Configure DNS content filtering Execute unifi_set_threat_management_mode Enable or disable Threat Management (IPS/IDS)

WRITE 9 tools

Write append_to_note Add content to the end of an existing note Write create_note Create a new note in the Obsidian vault Write jupyter_add_cell Add a new cell to a Jupyter notebook Write jupyter_create_notebook Create a new Jupyter notebook Write jupyter_update_cell Update an existing cell in a Jupyter notebook Write unifi_set_ad_blocking Enable or disable ad blocking Write unifi_set_client_name Set or update the name/alias for a client Write update_note Replace the entire content of an existing note Write write_file Write content to a file. Creates the file if it doesn\

READ 34 tools

Read ansible_compliance_report Read the latest compliance report for a device, or list all available reports. Read ansible_git_log View Git commit history for the Ansible project — shows configuration change history, backup timestamps, and d Read ansible_list_inventory List Ansible inventory — hosts, groups, and variables. Optionally filter by group or host. Read ansible_view_log View recent Ansible log entries or specific log files (backup, compliance, change detection, Linux health). Read get_backlinks Find all notes that link to a specific note Read get_disk_usage Get disk usage information for all mounted filesystems Read get_processes Get a list of running processes with resource usage Read get_system_info Get comprehensive system information about the Raspberry Pi Read get_table_schema Get detailed schema information for a specific table Read jupyter_list_kernels List all running Jupyter kernels Read jupyter_list_kernelspecs List available Jupyter kernel specifications Read jupyter_list_notebooks List notebooks and files in a Jupyter directory Read jupyter_list_sessions List all active Jupyter notebook sessions Read jupyter_read_notebook Read the contents of a Jupyter notebook Read list_directory List files and directories in a path. Only works within allowed paths. Read list_notes List all notes in the Obsidian vault, optionally filtered by folder Read list_tables List all tables in the configured SQLite database Read query_sqlite Execute a read-only SQL query on the configured SQLite database. Only SELECT queries are allowed. Read read_file Read the contents of a file. Only works within allowed paths. Read read_note Read the contents of an Obsidian note by name or path Read search_files Search for files matching a pattern within allowed paths. Read search_notes Search for notes containing specific text or matching a pattern Read unifi_get_alerts Get recent alerts and notifications from the UniFi controller Read unifi_get_blocked_threats Get summary of blocked threats and attack statistics Read unifi_get_client_details Get detailed information for a specific client by MAC address Read unifi_get_clients Get all connected clients/devices on the UniFi network Read unifi_get_devices Get all UniFi network devices (access points, switches, gateways) Read unifi_get_geoip_filtering Get country/GeoIP blocking configuration Read unifi_get_network_health Get overall network health and status Read unifi_get_security_score Get the Internet Security Score and recommendations Read unifi_get_threat_events Get recent threat detection events (IPS/IDS alerts) Read unifi_get_threat_management Get Threat Management (IPS/IDS) status and configuration Read unifi_get_traffic_stats Get bandwidth and traffic statistics Read unifi_unblock_client Unblock a previously blocked client

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Multi-Tool MCP Server

Can an AI agent delete data through the Multi-Tool MCP Server MCP server? +

Yes. The Multi-Tool MCP Server server exposes 3 destructive tools including delete_note, jupyter_delete_notebook, jupyter_delete_session. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Multi-Tool MCP Server? +

The Multi-Tool MCP Server server has 9 write tools including append_to_note, create_note, jupyter_add_cell. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Multi-Tool MCP Server.

How many tools does the Multi-Tool MCP Server MCP server expose? +

61 tools across 4 categories: Destructive, Execute, Read, Write. 34 are read-only. 27 can modify, create, or delete data.

How do I enforce a policy on Multi-Tool MCP Server? +

Register the Multi-Tool MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Multi-Tool MCP Server tool call.

Deterministic rules across all 61 Multi-Tool MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MULTI-TOOL →

Instant setup, no code required.

61 Multi-Tool MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.