// SCAN REPORT

Oracle APEX MCP Server

26 tools. 6 can modify or destroy data without limits.

6 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

6 can modify or destroy data

20 read-only

26 tools total

Community server · catalogue entry verified 29/06/2026

How to control Oracle APEX MCP Server ↓

TOOL MAP

What Oracle APEX MCP Server exposes to your agents

Read (20) Write / Execute (6) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Oracle APEX MCP Server tools

Execute · High oracle_compile_object While compilation itself is not destructive (the original code remains), it executes database operations that can trigger cascading effects on dependent objects and modify database metadata. Execute · Critical oracle_execute This tool can run arbitrary SQL including destructive DDL (DROP/TRUNCATE) and DML (DELETE), as well as PL/SQL blocks with unrestricted database access. Execute · Critical oracle_transaction This tool permits execution of arbitrary SQL/PL/SQL code within a transactional context. Execute · High oracle_connect This tool actively manages database connection state: it terminates existing connections and establishes new ones to potentially different databases.

6 of Oracle APEX MCP Server's 26 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Oracle APEX MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Oracle APEX MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "oracle_disconnect": {
    "limits": [
      {
        "counter": "oracle_disconnect_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "apex_describe_application": {
    "limits": [
      {
        "counter": "apex_describe_application_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Oracle APEX MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ORACLE APEX →

Instant setup, no code required.

FULL CATALOGUE

All 26 Oracle APEX MCP Server tools

EXECUTE 4 tools

Execute oracle_compile_object Compile (or recompile) a PL/SQL object: PACKAGE, PACKAGE BODY, PROCEDURE, FUNCTION, TRIGGER, TYPE, TYPE BODY, Execute oracle_connect Connect (or switch) to an Oracle database. Three modes: - tns: Use a TNS alias from tnsnames.ora (run oracle_l Execute oracle_execute Execute DML (INSERT/UPDATE/DELETE/MERGE), DDL (CREATE/ALTER/DROP/TRUNCATE), or PL/SQL blocks. Returns rows aff Execute oracle_transaction Execute multiple SQL statements in a single transaction (all-or-nothing). Automatically rolls back on error if

WRITE 2 tools

Write oracle_disconnect Disconnect from the current Oracle database and close the connection pool. Write oracle_explain_plan Generate execution plan for a SQL statement using EXPLAIN PLAN. Returns the plan table output for query optimi

READ 20 tools

Read apex_describe_application [READ-ONLY] Detailed info about an APEX application: pages, shared components (LOVs, auth schemes, templates, Read apex_describe_page [READ-ONLY] Detailed info about an APEX page: regions, items, processes, dynamic actions, validations. Read apex_get_page_source [READ-ONLY] Get full source code for an APEX page: JavaScript (Function Declaration), CSS (Inline CSS), region Read apex_list_applications [READ-ONLY] List Oracle APEX applications with ID, name, alias, owner, page count. Queries APEX_APPLICATIONS v Read apex_list_ords_enabled_objects [READ-ONLY] List tables and views that have been REST-enabled via ORDS AutoREST. Read apex_list_rest_services [READ-ONLY] List ORDS RESTful service modules, templates, and handlers defined in the schema. Read apex_list_workspace_users [READ-ONLY] List APEX workspace users with admin status and last login. Read oracle_connection_info Show current Oracle DB connection configuration (password masked). Read oracle_current_connection Show which database is currently connected, with connection details. Read oracle_dependencies Show object dependencies — what an object uses and what depends on it. Read oracle_describe_table Full description of a table: columns (type, nullable, default, comments), indexes, constraints, and optionally Read oracle_get_source Retrieve source code of a PL/SQL object or VIEW definition. Read oracle_health_check Check Oracle DB and APEX connectivity, version, pool status. Read oracle_list_objects List database objects by type. Filter by name pattern and validity status. Read oracle_list_tables List tables in a schema with row counts, comments, and last analyzed date. Supports LIKE filtering on table na Read oracle_list_tns_entries List all TNS entries found in tnsnames.ora. Searches TNS_ADMIN, ORACLE_HOME/network/admin, and common install Read oracle_query Execute a read-only SQL SELECT query against Oracle Database. Returns rows as a markdown table or JSON. Suppor Read oracle_search Search for database objects by name pattern, or search within PL/SQL source code. Read oracle_show_errors Show compilation errors for a PL/SQL object (like SQLPlus SHOW ERRORS). Read oracle_table_data_preview Preview sample data from a table. Read-only convenience tool. Optionally filter with WHERE clause and ORDER BY

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Oracle APEX MCP Server

How do I prevent bulk modifications through Oracle APEX MCP Server? +

The Oracle APEX MCP Server server has 2 write tools including oracle_disconnect, oracle_explain_plan. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Oracle APEX MCP Server.

How many tools does the Oracle APEX MCP Server MCP server expose? +

26 tools across 3 categories: Execute, Read, Write. 20 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on Oracle APEX MCP Server? +

Register the Oracle APEX MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Oracle APEX MCP Server tool call.

Deterministic rules across all 26 Oracle APEX MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ORACLE APEX →

Instant setup, no code required.

26 Oracle APEX MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.