// SCAN REPORT

Overlord MCP Server

62 tools. 25 can modify or destroy data without limits.

5 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

25 can modify or destroy data

37 read-only

62 tools total

Community server · catalogue entry verified 30/06/2026

How to control Overlord MCP Server ↓

TOOL MAP

What Overlord MCP Server exposes to your agents

Read (37) Write / Execute (20) Destructive / Financial (5)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Overlord MCP Server tools

Destructive · High delete_offline_clients This tool irreversibly removes client records from the database ('delete', 'wipe'). Destructive · High delete_build_profile The tool permanently removes a build profile, which cannot be undone. Destructive · High delete_client This tool permanently removes client entities from the C2 framework infrastructure. Destructive · High delete_profile This tool permanently deletes saved connection profiles, which cannot be undone.

25 of Overlord MCP Server's 62 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Overlord MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Overlord MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_build_profile": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_group": {
    "limits": [
      {
        "counter": "create_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "db_describe_table": {
    "limits": [
      {
        "counter": "db_describe_table_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Overlord MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON OVERLORD →

Instant setup, no code required.

FULL CATALOGUE

All 62 Overlord MCP Server tools

DESTRUCTIVE 5 tools

Destructive delete_build_profile Delete a saved build profile. Destructive delete_client Delete a client from the server. Only works for offline clients. Destructive delete_offline_clients Wipe all offline clients from the database. Requires confirmation. Destructive delete_profile Remove a saved connection profile. Destructive plugin_delete_data Delete a data file from a plugin's server-side storage.

EXECUTE 6 tools

Execute db_query db_query Execute ping_client Send a ping to a specific client and measure RTT. Execute plugin_exec Execute a binary from a plugin on the Overlord server. Execute plugin_load_to_client Load a plugin onto a specific client/agent. Execute plugin_send_event plugin_send_event Execute plugin_unload_from_client Unload a plugin from a specific client/agent.

WRITE 14 tools

Write create_group Create a new client group. Write plugin_write_data Write or update a data file in a plugin's server-side storage. Write save_build_profile Save a build configuration profile. Write set_client_bookmark Bookmark or unbookmark a client. Write set_client_group Assign a client to a group or remove from group. Write set_client_nickname Set or clear a client's nickname. Write set_client_tag Set or clear a client's custom tag and note. Write set_plugin_auto_load Configure auto-load behavior for a plugin. Write set_plugin_enabled Enable or disable a plugin. Write setup setup Write switch_profile Switch to a different saved connection profile. Write update_enrollment_config Toggle whether new agents require operator approval. Write update_notifications_config update_notifications_config Write update_security_config Update server security settings (admin only).

READ 37 tools

Read db_describe_table Show column names, types, and constraints for a database table. Read db_get_stats Get database file size and row counts for all tables. Read db_list_tables List all tables in the Overlord SQLite database. Read get_audit_logs get_audit_logs Read get_audit_stats Get summary statistics from the audit log. Read get_auto_deploy Get full details of an auto-deployment. Read get_auto_script Get full details of an auto-script including script content. Read get_build Get detailed build status and files. Read get_cert_info Get TLS certificate source and configuration info. Read get_client Get detailed information about a specific client/agent. Read get_config View the full Overlord server configuration with secrets masked. Read get_metrics get_metrics Read get_metrics_history Get metrics history timeline (up to 60 data points at 5-second intervals). Read get_my_info Get information about the currently authenticated user. Read get_notifications_config View notification configuration (keywords, webhook, telegram, clipboard). Read get_plugin Get detailed info about a specific plugin. Read get_server_logs get_server_logs Read get_shared_file_info Get public metadata about a specific shared file. Read get_user Get detailed info about a specific user (admin only). Read get_version Get the Overlord server version. Read health_check Check if the Overlord server is healthy and responding. Read list_auto_deploys List all auto-deployments with triggers and file info. Read list_auto_scripts List all auto-scripts with triggers and enabled state. Read list_banned_ips List all banned IP addresses with reasons and timestamps. Read list_build_profiles List your saved build configuration profiles. Read list_builds List builds (your own, or all if admin). Read list_clients list_clients Read list_groups List all client groups with member counts. Read list_plugins List all plugins with enabled/disabled status. Read list_profiles List all saved connection profiles from ~/.overlord-mcp/config.json. Read list_proxies List active SOCKS5 proxy tunnels. Read list_shared_files List all shared files with metadata (passwords excluded). Read list_users List all Overlord users (requires admin role). Read plugin_get_events Poll pending UI events from a plugin on a client. Events are drained on read. Read plugin_list_data List all data files for a plugin stored on the server. Read plugin_read_data Read a data file from a plugin's server-side storage. Read status Show current Overlord connection status, capabilities, and profile info.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Overlord MCP Server

Can an AI agent delete data through the Overlord MCP Server MCP server? +

Yes. The Overlord MCP Server server exposes 5 destructive tools including delete_build_profile, delete_client, delete_offline_clients. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Overlord MCP Server? +

The Overlord MCP Server server has 14 write tools including create_group, plugin_write_data, save_build_profile. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Overlord MCP Server.

How many tools does the Overlord MCP Server MCP server expose? +

62 tools across 4 categories: Destructive, Execute, Read, Write. 37 are read-only. 25 can modify, create, or delete data.

How do I enforce a policy on Overlord MCP Server? +

Register the Overlord MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Overlord MCP Server tool call.

Deterministic rules across all 62 Overlord MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON OVERLORD →

Instant setup, no code required.

62 Overlord MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.