// SCAN REPORT

AAP MCP Server

86 tools. 49 can modify or destroy data without limits.

15 destructive tools with no built-in limits. Policy required.

Last updated:

49 can modify or destroy data
37 read-only
86 tools total

Community server · catalogue entry verified 30/06/2026

How to control AAP MCP Server ↓

TOOL MAP

What AAP MCP Server exposes to your agents

Read (37) Write / Execute (34) Destructive / Financial (15)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous AAP MCP Server tools

Destructive · High aap_cancel_job Cancelling a job in Ansible Automation Platform stops execution permanently and cannot be undone. Destructive · High aap_delete_credential The 'delete' verb places this firmly in the Destructive category rather than Write, as credential deletion is irreversible and cannot be undone through normal operations. Destructive · High aap_delete_execution_environment Deletion of execution environments is irreversible and cannot be undone. Destructive · High aap_delete_group This tool irreversibly deletes data (a host group) from the Ansible Automation Platform inventory.

49 of AAP MCP Server's 86 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control AAP MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and AAP MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "aap_cancel_job": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "aap_add_host_to_group": {
    "limits": [
      {
        "counter": "aap_add_host_to_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "aap_export_all_resources": {
    "limits": [
      {
        "counter": "aap_export_all_resources_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register AAP MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON AAP →

Instant setup, no code required.

FULL CATALOGUE

All 86 AAP MCP Server tools

DESTRUCTIVE 15 tools
Destructive aap_cancel_job aap_cancel_job Destructive aap_delete_credential aap_delete_credential Destructive aap_delete_execution_environment Delete an AAP execution environment. DESTRUCTIVE - requires confirmation. Destructive aap_delete_group Delete a host group from an AAP inventory. DESTRUCTIVE - requires confirmation. Destructive aap_delete_host Delete a host from an AAP inventory. DESTRUCTIVE - requires confirmation. Destructive aap_delete_inventory aap_delete_inventory Destructive aap_delete_job_template aap_delete_job_template Destructive aap_delete_organization aap_delete_organization Destructive aap_delete_project aap_delete_project Destructive aap_delete_schedule Delete an AAP schedule. DESTRUCTIVE - requires confirmation. Destructive aap_delete_team Delete an AAP team. DESTRUCTIVE - requires confirmation. Destructive aap_delete_user Delete an AAP user. DESTRUCTIVE - requires confirmation. Destructive aap_delete_workflow_template aap_delete_workflow_template Destructive aap_remove_user_from_team Remove a user from an AAP team. Destructive aap_revoke_role Revoke an RBAC role from an AAP user.
EXECUTE 4 tools
Execute aap_launch_job_template aap_launch_job_template Execute aap_launch_workflow aap_launch_workflow Execute aap_relaunch_job Relaunch a completed or failed AAP job. Execute aap_sync_project Trigger an SCM sync (git pull) for an AAP project.
WRITE 30 tools
Write aap_add_host_to_group Add an existing host to a group within an inventory. Write aap_add_user_to_team Add a user to an AAP team. Write aap_assign_role Assign an RBAC role to an AAP user. Write aap_copy_job_template Copy an existing job template with a new name. Write aap_create_credential aap_create_credential Write aap_create_credential_type aap_create_credential_type Write aap_create_execution_environment Create an AAP execution environment referencing a container image. Write aap_create_group Create a host group inside an AAP inventory. Write aap_create_host Add a host to an AAP inventory. Write aap_create_inventory Create a new AAP inventory. Write aap_create_job_template aap_create_job_template Write aap_create_organization aap_create_organization Write aap_create_project aap_create_project Write aap_create_schedule aap_create_schedule Write aap_create_team Create a new AAP team within an organization. Write aap_create_user Create a new AAP user. Write aap_create_workflow_template aap_create_workflow_template Write aap_remove_host_from_group Remove a host from a group (disassociate, not delete the host). Write aap_update_credential Update an existing AAP credential (PATCH). Write aap_update_execution_environment Update an existing AAP execution environment (PATCH). Write aap_update_group Update an existing AAP inventory group (PATCH). Write aap_update_host Update an existing AAP host (PATCH). Write aap_update_inventory Update an existing AAP inventory (PATCH). Write aap_update_job_template Update an existing AAP job template (PATCH). Write aap_update_organization aap_update_organization Write aap_update_project Update an AAP project (PATCH). Write aap_update_schedule Update an existing AAP schedule (PATCH). Write aap_update_team Update an existing AAP team (PATCH). Write aap_update_user Update an existing AAP user (PATCH). Write aap_update_workflow_template Update an existing AAP workflow template (PATCH).
READ 37 tools
Read aap_export_all_resources aap_export_all_resources Read aap_export_inventory aap_export_inventory Read aap_export_job_template aap_export_job_template Read aap_export_project aap_export_project Read aap_export_workflow aap_export_workflow Read aap_get_audit_logs aap_get_audit_logs Read aap_get_cluster_status Get AAP cluster node status, capacity, and health summary. Read aap_get_controller_health Check AAP Controller health status (ping endpoint). Read aap_get_credential Get details of an AAP credential (secrets masked by AAP). Read aap_get_failed_jobs aap_get_failed_jobs Read aap_get_instance_capacity Get capacity and workload details for a specific AAP controller node. Read aap_get_job_events aap_get_job_events Read aap_get_job_output aap_get_job_output Read aap_get_job_template aap_get_job_template Read aap_get_license_info Get AAP subscription and license details. Read aap_get_organization aap_get_organization Read aap_get_project Get full details of an AAP project. Read aap_get_project_sync_status Get the status of an ongoing or completed project SCM sync. Read aap_get_recent_activity aap_get_recent_activity Read aap_get_user Get details of a specific AAP user by ID. Read aap_get_workflow_status Get status of a running or completed workflow job including node results. Read aap_get_workflow_template Get full details of an AAP workflow template including node structure. Read aap_list_collections List Ansible collections in Automation Hub. Read aap_list_credential_types aap_list_credential_types Read aap_list_credentials aap_list_credentials Read aap_list_execution_environments List AAP execution environments (container images for job execution). Read aap_list_hosts List hosts in an AAP inventory. Read aap_list_instances List all AAP controller and execution node instances. Read aap_list_inventories List AAP inventories. Read aap_list_job_templates aap_list_job_templates Read aap_list_organizations aap_list_organizations Read aap_list_projects List AAP projects (SCM-backed playbook repositories). Read aap_list_running_jobs List all currently running jobs in AAP. Read aap_list_schedules List AAP schedules for jobs and workflows. Read aap_list_teams List AAP teams. Read aap_list_users aap_list_users Read aap_list_workflow_templates List AAP workflow job templates.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about AAP MCP Server

Can an AI agent delete data through the AAP MCP Server MCP server? +

Yes. The AAP MCP Server server exposes 15 destructive tools including aap_cancel_job, aap_delete_credential, aap_delete_execution_environment. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through AAP MCP Server? +

The AAP MCP Server server has 30 write tools including aap_add_host_to_group, aap_add_user_to_team, aap_assign_role. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach AAP MCP Server.

How many tools does the AAP MCP Server MCP server expose? +

86 tools across 4 categories: Destructive, Execute, Read, Write. 37 are read-only. 49 can modify, create, or delete data.

How do I enforce a policy on AAP MCP Server? +

Register the AAP MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every AAP MCP Server tool call.

Deterministic rules across all 86 AAP MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON AAP →

Instant setup, no code required.

86 AAP MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.