// SCAN REPORT

Infra Ops

92 tools. 16 can modify or destroy data without limits.

16 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

16 can modify or destroy data

76 read-only

92 tools total

Community server · catalogue entry verified 30/06/2026

How to control Infra Ops ↓

TOOL MAP

What Infra Ops exposes to your agents

Read (76) Write / Execute (16) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Infra Ops tools

Execute · High system_service_control This tool executes external operations (service lifecycle management) whose effects depend on which service is targeted. Execute · High docker_container_restart Restarting a Docker container is an Execute action—it runs a command that causes an external system (the container runtime) to perform an operation whose effects depend on the container identifier provided as an argument Execute · High docker_container_start This tool executes external operations (container startup) that can have significant side effects. Execute · High docker_container_stop Stopping a container is an Execute action—it triggers an external operation (Docker daemon) with effects determined by which container is targeted.

16 of Infra Ops's 92 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Infra Ops

PolicyLayer is an MCP gateway — it sits between your AI agents and Infra Ops, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "aws_cloudwatch_metrics": {
    "limits": [
      {
        "counter": "aws_cloudwatch_metrics_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Infra Ops — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON INFRA OPS →

Instant setup, no code required.

FULL CATALOGUE

All 92 Infra Ops tools

EXECUTE 16 tools

Execute backup_restore_test Test restoring a backup by extracting to a temporary location and verifying contents Execute db_mongodb_query Execute a MongoDB find query on a collection Execute db_mysql_query Execute a read-only MySQL query Execute docker_container_restart Restart a Docker container Execute docker_container_start Start a stopped Docker container Execute docker_container_stop Stop a running Docker container Execute iac_ansible_playbook_run Run an Ansible playbook in check mode (dry-run with diff) Execute iac_terraform_plan Run Terraform plan to preview infrastructure changes Execute k8s_scale_deployment Scale a Kubernetes deployment to the specified number of replicas Execute monitoring_uptime_check Perform an HTTP or TCP uptime check on a target Execute network_traceroute Trace the route packets take to a destination host Execute remote_fleet_command Execute a command across multiple remote hosts via SSH Execute remote_ssh_exec Execute a command on a remote host via SSH Execute security_compliance_check Run compliance benchmarks using Trivy configuration scanning Execute security_cve_scan Run a CVE vulnerability scan on a filesystem path using Trivy Execute system_service_control Start, stop, or restart a system service. Requires confirmation. Uses sc on Windows, systemctl on Linux, launc

READ 76 tools

Read aws_cloudwatch_metrics Get CloudWatch metrics Read aws_ec2_instances List EC2 instances Read aws_lambda_functions List Lambda functions Read aws_rds_instances List RDS instances Read aws_route53_zones List Route53 zones Read aws_s3_buckets List S3 buckets Read azure_aks_clusters List AKS clusters Read azure_storage_accounts List storage accounts Read azure_vm_list List VMs Read backup_integrity_check Verify backup file integrity by checking existence, readability, and checksums or archive validity Read backup_status Check backup status by listing files in the backup directory with sizes and dates Read cicd_github_workflow_runs List recent workflow runs for a GitHub Actions workflow Read cicd_github_workflows List GitHub Actions workflows for a repository Read cicd_gitlab_jobs List jobs for a specific GitLab CI/CD pipeline Read cicd_gitlab_pipelines List GitLab CI/CD pipelines for a project Read db_mongodb_health Check MongoDB health including stats, server status, and connections Read db_mysql_health Check MySQL database health including version, status, and connections Read db_postgres_health Check PostgreSQL database health including version, connections, and size Read db_postgres_query Execute a read-only PostgreSQL query Read db_redis_health Check Redis health including PING, memory usage, and database size Read db_redis_info Get Redis server INFO for a specific section or all sections Read dns_propagation_check Check DNS propagation across multiple public DNS servers Read dns_records Query DNS records for a domain with optional type and server Read dns_zone_query Query zone information including SOA and NS records for a domain Read docker_compose_status Get Docker Compose project status showing all services and their states Read docker_container_inspect Inspect a Docker container to get detailed configuration and state information Read docker_container_list List Docker containers with their status, names, and basic info Read docker_container_logs Retrieve logs from a Docker container Read docker_container_stats Get real-time resource usage statistics for a Docker container Read docker_image_list List Docker images available on the host Read docker_network_list List Docker networks Read docker_volume_list List Docker volumes Read gcp_compute_instances List GCE instances Read gcp_gke_clusters List GKE clusters Read iac_ansible_inventory Show Ansible inventory in YAML format Read iac_pulumi_stacks List all Pulumi stacks in JSON format Read iac_terraform_state Show the current Terraform state in JSON format Read k8s_deployment_list List Kubernetes deployments in a namespace Read k8s_events List Kubernetes cluster events for debugging and monitoring Read k8s_node_list List Kubernetes cluster nodes with their status and resource info Read k8s_pod_list List Kubernetes pods in a namespace with their status and metadata Read k8s_pod_logs Retrieve logs from a Kubernetes pod Read k8s_service_list List Kubernetes services in a namespace Read monitoring_alerts Get active alerts from a Prometheus Alertmanager endpoint Read monitoring_custom_metrics Query custom metrics from a Prometheus endpoint Read monitoring_sla_status Calculate SLA status and allowed downtime based on uptime percentage Read network_active_connections List all active (ESTABLISHED) network connections with associated processes Read network_bandwidth_test Measure current network throughput by sampling network stats over a 1 second interval Read network_dns_resolve Resolve a hostname using DNS lookup with support for various record types Read network_firewall_rules Display current firewall rules and policies Read network_interfaces List all network interfaces with their configuration (IP addresses, MAC, speed, status) Read network_listening_ports List all ports currently in LISTEN state with associated processes Read network_routes Display the system routing table Read network_wifi_info Get information about available WiFi networks and current connection Read remote_host_inventory List configured remote hosts and check their connectivity status Read security_cert_check Check TLS certificate details for a host including expiration Read security_port_audit Audit listening ports and flag well-known dangerous ports Read security_secrets_scan Scan for hardcoded secrets and credentials using Gitleaks Read storage_lvm_info Get LVM (Logical Volume Manager) information including physical volumes, volume groups, and logical volumes Read storage_mounts Get mounted filesystem information including disk layout and usage Read storage_nfs_shares Get NFS share configuration and exported filesystems Read storage_partitions Get disk partition and block device information Read storage_quotas Get filesystem quota information Read storage_raid_status Get RAID array status and configuration Read storage_smart_health Get SMART health data for storage devices Read system_cpu_info Get CPU information including manufacturer, brand, speed, cores, and current load Read system_disk_usage Get disk space usage for all mounted filesystems Read system_drivers List system drivers. Uses driverquery on Windows, lsmod on Linux, kextstat on macOS. Read system_hardware_info Get hardware information including system manufacturer, BIOS, and baseboard details Read system_memory_info Get memory information including total, used, free RAM and swap usage Read system_process_kill Kill a process by PID. Requires confirmation. Uses taskkill on Windows, kill on Unix. Read system_process_list List running processes with optional filtering by name and sorting by cpu, memory, or pid Read system_scheduled_tasks List scheduled tasks. Uses schtasks on Windows, crontab -l on Linux, launchctl list on macOS. Read system_service_list List system services and their current status Read system_uptime Get system uptime and boot time information Read system_users Get currently logged in users

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Infra Ops

Is the Infra Ops MCP server safe to use without restrictions? +

The Infra Ops server is primarily read-only with 76 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Infra Ops MCP server expose? +

92 tools across 3 categories: Execute, Read, Write. 76 are read-only. 16 can modify, create, or delete data.

How do I enforce a policy on Infra Ops? +

Register the Infra Ops MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Infra Ops tool call.

Deterministic rules across all 92 Infra Ops tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON INFRA OPS →

Instant setup, no code required.

92 Infra Ops tools catalogued and risk-classified — across an index of 43,000+ MCP servers.