// SCAN REPORT

Vicarius vRx MCP Server

89 tools. 29 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated:

29 can modify or destroy data
60 read-only
89 tools total

Community server · catalogue entry verified 30/06/2026

How to control Vicarius vRx MCP Server ↓

TOOL MAP

What Vicarius vRx MCP Server exposes to your agents

Read (60) Write / Execute (22) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Vicarius vRx MCP Server tools

Destructive · High automation_delete Although the description uses 'Disable' rather than 'Delete', the HTTP DELETE method combined with the action of removing/disabling an automation instance means this tool irreversibly removes or deactivates data. Destructive · High automation_task_templates_delete_many This tool performs irreversible deletion of multiple automation task template objects via a DELETE API endpoint. Destructive · High endpoint_delete Although the description uses the euphemism 'disable' rather than permanently delete, the DELETE HTTP method and the tool name 'endpoint_delete' indicate an irreversible operation that removes or disables an endpoint fro Destructive · High endpoint_delete_many This tool performs batch deletion of endpoint objects.

29 of Vicarius vRx MCP Server's 89 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Vicarius vRx MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Vicarius vRx MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "automation_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "automation_insert": {
    "limits": [
      {
        "counter": "automation_insert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "aggregation_group": {
    "limits": [
      {
        "counter": "aggregation_group_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Vicarius vRx MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON VICARIUS VRX →

Instant setup, no code required.

FULL CATALOGUE

All 89 Vicarius vRx MCP Server tools

DESTRUCTIVE 7 tools
Destructive automation_delete automation \u00b7 DELETE /automation/delete \u2014 Disable instance of the object. Requires a JSON request bod Destructive automation_task_templates_delete_many automation_task_templates \u00b7 DELETE /automationTaskTemplates/deleteMany \u2014 Disable instance of the obj Destructive endpoint_delete endpoint \u00b7 DELETE /endpoint/delete \u2014 Disable instance of the object. Requires a JSON request body. Destructive endpoint_delete_many endpoint \u00b7 DELETE /endpoint/deleteMany \u2014 Disable instance of the objects. Required: q. Requires a JS Destructive organization_endpoint_group_delete organization_endpoint_group \u00b7 DELETE /organizationEndpointGroup/delete \u2014 Disable instance of the obj Destructive organization_external_reference_source_settings_delete organization_external_reference_source_settings \u00b7 DELETE /organizationExternalReferenceSourceSettings/del Destructive user_invitation_delete user_invitation \u00b7 DELETE /userInvitation/delete \u2014 Disable instance of the object. Requires a JSON re
WRITE 22 tools
Write automation_insert automation \u00b7 PUT /automation/insert \u2014 insert instance of the object Requires a JSON request body. Write automation_task_templates_insert automation_task_templates \u00b7 PUT /automationTaskTemplates/insert \u2014 Insert instance of the object Requ Write automation_task_templates_insert_many automation_task_templates \u00b7 PUT /automationTaskTemplates/insertMany \u2014 Inserte instance of the object Write automation_update automation \u00b7 POST /automation/update \u2014 Update instance of the object Requires a JSON request body. Write automations_automations_1 automations \u00b7 POST /v1/automations \u2014 Inserts automation Requires a JSON request body. Write automations_automations_3 automations \u00b7 PUT /v1/automations/{id} \u2014 Updates automation Required: id. Requires a JSON request bo Write automations_update_state automations \u00b7 PUT /v1/automations/{id}/updateState \u2014 Updates automation state Required: id. Requires Write organization_endpoint_group_insert organization_endpoint_group \u00b7 PUT /organizationEndpointGroup/insert \u2014 insert instance of the object Write organization_endpoint_group_update organization_endpoint_group \u00b7 POST /organizationEndpointGroup/update \u2014 Update instance of the object Write organization_external_reference_source_settings_insert organization_external_reference_source_settings \u00b7 PUT /organizationExternalReferenceSourceSettings/insert Write organization_external_reference_source_settings_update organization_external_reference_source_settings \u00b7 POST /organizationExternalReferenceSourceSettings/updat Write organization_scan_input_insert_and_upload organization_scan_input \u00b7 PUT /organizationScanInput/insertAndUpload \u2014 Inserts object and stores its Write organization_scan_input_update organization_scan_input \u00b7 POST /organizationScanInput/update \u2014 Update instance of the object Require Write organization_scan_input_upload organization_scan_input \u00b7 PUT /organizationScanInput/upload \u2014 Stores events Requires a JSON request Write task_template_insert task_template \u00b7 PUT /taskTemplate/insert \u2014 Insert instance of the object Requires a JSON request bod Write task_template_insert_many task_template \u00b7 PUT /taskTemplate/insertMany \u2014 Inserte instance of the object Requires a JSON reques Write task_template_update task_template \u00b7 POST /taskTemplate/update \u2014 Update instance of the object Requires a JSON request bo Write task_update task \u00b7 POST /task/update \u2014 Update instance of the object Requires a JSON request body. Write user_invitation_insert user_invitation \u00b7 PUT /userInvitation/insert \u2014 insert instance of the object Requires a JSON request Write user_invitation_insert_many user_invitation \u00b7 PUT /userInvitation/insertMany \u2014 Insert instance of the object Requires a JSON req Write user_invitation_resend user_invitation \u00b7 POST /userInvitation/resend \u2014 Resend invitation Requires a JSON request body. Write user_invitation_update user_invitation \u00b7 POST /userInvitation/update \u2014 Update instance of the object Requires a JSON reques
READ 60 tools
Read aggregation_group aggregation \u00b7 POST /aggregation/group \u2014 Group objects by stuff. Required: metricActionName, metricAn Read aggregation_search_group aggregation \u00b7 POST /aggregation/searchGroup \u2014 Group objects by stuff. Required: objectName, q, from, Read automation_search automation \u00b7 POST /automation/search \u2014 Returns events Required: q, from, size. Read automation_search_all automation \u00b7 POST /automation/searchAll \u2014 Returns events Required: q, from, size. Read automation_search_by_fields automation \u00b7 POST /automation/searchByFields \u2014 Get object by connection. Required: from, size, q. Read automations_automations automations \u00b7 GET /v1/automations \u2014 Returns list of automations Read automations_automations_2 automations \u00b7 GET /v1/automations/{id} \u2014 Returns automation by id Required: id. Read date_get_current_date date \u00b7 GET /date/getCurrentDate \u2014 Get current date. Read endpoint_attributes_search endpoint_attributes \u00b7 POST /endpointAttributes/search \u2014 Returns events Required: q, from, size. Read endpoint_attributes_search_by_fields endpoint_attributes \u00b7 POST /endpointAttributes/searchByFields \u2014 Get object by connection. Required: Read endpoint_search Search endpoints (assets). RSQL q filter, e.g. q=endpointName== Read endpoint_vulnerability_count endpoint_vulnerability \u00b7 GET /endpointVulnerability/count \u2014 Count objects by stuff. Required: q, sea Read endpoint_vulnerability_count_1 endpoint_vulnerability \u00b7 POST /endpointVulnerability/count \u2014 Count objects by stuff. Required: q. Al Read endpoint_vulnerability_filter endpoint_vulnerability \u00b7 POST /endpointVulnerability/filter \u2014 Returns events Required: q, from, size Read external_reference_external_references_search_by_fields external_reference_external_references \u00b7 POST /externalReferenceExternalReferences/searchByFields \u2014 Read external_reference_external_references_search_by_objects external_reference_external_references \u00b7 POST /externalReferenceExternalReferences/searchByObjects \u2014 Read incident_event_count incident_event \u00b7 GET /incidentEvent/count \u2014 Count objects by stuff. Required: q, searchQuerys. Allow Read incident_event_count_1 incident_event \u00b7 POST /incidentEvent/count \u2014 Count objects by stuff. Required: q. Allowed values: an Read incident_event_filter incident_event \u00b7 POST /incidentEvent/filter \u2014 Returns events Required: q, from, size. Allowed values Read operating_system_family_search_by_fields operating_system_family \u00b7 POST /operatingSystemFamily/searchByFields \u2014 Get object by connection. Req Read org_endpoint_external_references_search organization_endpoint_external_reference_external_references \u00b7 POST /organizationEndpointExternalReferenc Read org_endpoint_publisher_os_locate_position organization_endpoint_publisher_operating_systems \u00b7 GET /organizationEndpointPublisherOperatingSystems/lo Read organization_endpoint_group_search organization_endpoint_group \u00b7 POST /organizationEndpointGroup/search \u2014 Returns events Required: q, f Read organization_endpoint_group_search_by_fields organization_endpoint_group \u00b7 POST /organizationEndpointGroup/searchByFields \u2014 Get object by connect Read organization_endpoint_patch_patch_packages_count organization_endpoint_patch_patch_packages \u00b7 GET /organizationEndpointPatchPatchPackages/count \u2014 Cou Read organization_endpoint_patch_patch_packages_count_1 organization_endpoint_patch_patch_packages \u00b7 POST /organizationEndpointPatchPatchPackages/count \u2014 Co Read organization_endpoint_patch_patch_packages_filter organization_endpoint_patch_patch_packages \u00b7 POST /organizationEndpointPatchPatchPackages/filter \u2014 R Read organization_endpoint_publisher_operating_systems_search organization_endpoint_publisher_operating_systems \u00b7 POST /organizationEndpointPublisherOperatingSystems/s Read organization_endpoint_publisher_product_versions_search organization_endpoint_publisher_product_versions \u00b7 POST /organizationEndpointPublisherProductVersions/sea Read organization_endpoint_vulnerabilities_search organization_endpoint_vulnerabilities \u00b7 POST /organizationEndpointVulnerabilities/search \u2014 Returns e Read organization_publisher_operating_systems_locate_object_position organization_publisher_operating_systems \u00b7 GET /organizationPublisherOperatingSystems/locateObjectPositio Read organization_publisher_operating_systems_search organization_publisher_operating_systems \u00b7 POST /organizationPublisherOperatingSystems/search \u2014 Retu Read organization_publisher_products_locate_object_position organization_publisher_products \u00b7 GET /organizationPublisherProducts/locateObjectPosition \u2014 Returns Read organization_publisher_products_search organization_publisher_products \u00b7 POST /organizationPublisherProducts/search \u2014 Returns events Requir Read organization_scan_input_redirect organization_scan_input \u00b7 GET /organizationScanInput/redirect \u2014 Redirect to static file by id. Requi Read organization_scan_input_search organization_scan_input \u00b7 POST /organizationScanInput/search \u2014 Returns events Required: q, from, siz Read patch_management_cve_info patch_management \u00b7 GET /patchManagement/patch/{patchId}/cveInfo \u2014 Returns CVE info for a specific pa Read patch_management_patch patch_management \u00b7 GET /patchManagement/patch \u2014 Returns list of patches Required: searchQueries, sof Read patch_management_patch_1 patch_management \u00b7 POST /patchManagement/patch \u2014 Returns list of patches Required: softwareType. All Read patch_package_links_search_by_fields patch_package_links \u00b7 POST /patchPackageLinks/searchByFields \u2014 Get object by connection. Required: f Read patch_package_search_by_fields patch_package \u00b7 POST /patchPackage/searchByFields \u2014 Get object by connection. Required: from, size, Read publisher_product_photos_redirect_to_publisher_product_photo publisher_product_photos \u00b7 GET /publisherProductPhotos/redirectToPublisherProductPhoto \u2014 Redirect to Read script_template_commands_search_by_fields script_template_commands \u00b7 POST /scriptTemplateCommands/searchByFields \u2014 Get object by connection. R Read script_template_search script_template \u00b7 POST /scriptTemplate/search \u2014 Returns events Required: q, from, size. Read task_endpoints_event_count task_endpoints_event \u00b7 GET /taskEndpointsEvent/count \u2014 Count objects by stuff. Required: q, searchQu Read task_endpoints_event_count_1 task_endpoints_event \u00b7 POST /taskEndpointsEvent/count \u2014 Count objects by stuff. Required: q. Allowed Read task_endpoints_event_filter task_endpoints_event \u00b7 POST /taskEndpointsEvent/filter \u2014 Returns events Required: q, from, size. All Read task_endpoints_event_task_types task_endpoints_event \u00b7 GET /taskEndpointsEvent/taskTypes \u2014 Returns a list of task types Read task_event_count task_event \u00b7 GET /taskEvent/count \u2014 Count objects by stuff. Required: q, searchQuerys. Allowed value Read task_event_count_1 task_event \u00b7 POST /taskEvent/count \u2014 Count objects by stuff. Required: q. Allowed values: analyticsE Read task_event_filter task_event \u00b7 POST /taskEvent/filter \u2014 Returns events Required: q, from, size. Allowed values: analyt Read user_invitation_search user_invitation \u00b7 POST /userInvitation/search \u2014 Returns events Required: q, from, size. Read user_invitation_search_by_fields user_invitation \u00b7 POST /userInvitation/searchByFields \u2014 Get object by connection. Required: from, si Read user_search user \u00b7 POST /user/search \u2014 Returns events Required: q, from, size. Read vrx_request vrx_request Read vulnerability_attack_vectors_search_by_fields vulnerability_attack_vectors \u00b7 POST /vulnerabilityAttackVectors/searchByFields \u2014 Get object by conne Read vulnerability_count vulnerability \u00b7 GET /vulnerability/count \u2014 Count objects by stuff. Required: q, searchQuerys. Read vulnerability_internal_tags_search_by_fields vulnerability_internal_tags \u00b7 POST /vulnerabilityInternalTags/searchByFields \u2014 Get object by connect Read vulnerability_links_search_by_fields vulnerability_links \u00b7 POST /vulnerabilityLinks/searchByFields \u2014 Get object by connection. Required: Read vulnerability_search Search vulnerabilities/CVEs. RSQL q filter, e.g. q=vulnerabilitySensitivityLevel.sensitivityLevelName==
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
admin
Nodebench 824 tools
admin
UnClick 813 tools
admin
Binance MCP Server 734 tools
admin
Pfsense 680 tools
admin
AdButler 622 tools
admin
Fortimanager 584 tools
admin
Crow 573 tools
admin
FAQ

Questions about Vicarius vRx MCP Server

Can an AI agent delete data through the Vicarius vRx MCP Server MCP server? +

Yes. The Vicarius vRx MCP Server server exposes 7 destructive tools including automation_delete, automation_task_templates_delete_many, endpoint_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Vicarius vRx MCP Server? +

The Vicarius vRx MCP Server server has 22 write tools including automation_insert, automation_task_templates_insert, automation_task_templates_insert_many. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Vicarius vRx MCP Server.

How many tools does the Vicarius vRx MCP Server MCP server expose? +

89 tools across 3 categories: Destructive, Read, Write. 60 are read-only. 29 can modify, create, or delete data.

How do I enforce a policy on Vicarius vRx MCP Server? +

Register the Vicarius vRx MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Vicarius vRx MCP Server tool call.

Deterministic rules across all 89 Vicarius vRx MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VICARIUS VRX →

Instant setup, no code required.

89 Vicarius vRx MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.