// SCAN REPORT

Wiki Js

21 tools. 14 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

14 can modify or destroy data

7 read-only

21 tools total

Community server · catalogue entry verified 11/06/2026

How to control Wiki Js ↓

TOOL MAP

Read (7) Write / Execute (10) Destructive / Financial (4)

MOST DANGEROUS TOOLS

Critical Risk

Destructive · Critical wikijs_batch_delete_pages Batch deletion is a destructive operation that removes data without possibility of reversal (unless backups exist outside the tool's scope). Destructive · High wikijs_delete_hierarchy The tool name explicitly uses 'delete', which is a destructive action that cannot be undone. Destructive · High wikijs_delete_page Deletion of wiki pages is a destructive action that cannot be undone. Destructive · Medium wikijs_cleanup_orphaned_mappings 'Clean up' mappings implies irreversible deletion of mapping records.

14 of Wiki Js's 21 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL WIKI JS

PolicyLayer is an MCP gateway — it sits between your AI agents and Wiki Js, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "wikijs_batch_delete_pages": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "wikijs_sync_file_docs": {
    "limits": [
      {
        "counter": "wikijs_sync_file_docs_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "wikijs_connection_status": {
    "limits": [
      {
        "counter": "wikijs_connection_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Wiki Js — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON WIKI JS →

Free to start. No card required.

ALL 21 WIKI JS TOOLS

DESTRUCTIVE 4 tools

Destructive wikijs_batch_delete_pages wikijs_batch_delete_pages Destructive wikijs_delete_hierarchy wikijs_delete_hierarchy Destructive wikijs_delete_page Delete a specific page from Wiki.js. Destructive wikijs_cleanup_orphaned_mappings Clean up file-to-page mappings for pages that no longer exist in Wiki.js.

WRITE 10 tools

Write wikijs_sync_file_docs Sync a code change to the linked Wiki.js page. Write wikijs_bulk_update_project_docs wikijs_bulk_update_project_docs Write wikijs_create_documentation_hierarchy wikijs_create_documentation_hierarchy Write wikijs_create_nested_page wikijs_create_nested_page Write wikijs_create_page wikijs_create_page Write wikijs_create_repo_structure wikijs_create_repo_structure Write wikijs_create_space Create a new space in Wiki.js. Write wikijs_link_file_to_page Persist link between code file and Wiki.js page in local database. Write wikijs_manage_collections wikijs_manage_collections Write wikijs_update_page Update an existing page in Wiki.js.

READ 7 tools

Read wikijs_connection_status Check the status of the Wiki.js connection and authentication. Read wikijs_get_page Retrieve page metadata and content from Wiki.js. Read wikijs_get_page_children Get all child pages of a given page for hierarchical navigation. Read wikijs_list_spaces List all spaces (top-level Wiki.js containers). Read wikijs_repository_context Show current repository context and Wiki.js organization. Read wikijs_search_pages Search pages by text in Wiki.js. Read wikijs_generate_file_overview wikijs_generate_file_overview

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent delete data through the Wiki Js MCP server? +

Yes. The Wiki Js server exposes 4 destructive tools including wikijs_batch_delete_pages, wikijs_delete_hierarchy, wikijs_delete_page. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Wiki Js? +

The Wiki Js server has 10 write tools including wikijs_sync_file_docs, wikijs_bulk_update_project_docs, wikijs_create_documentation_hierarchy. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Wiki Js.

How many tools does the Wiki Js MCP server expose? +

21 tools across 3 categories: Destructive, Read, Write. 7 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on Wiki Js? +

Register the Wiki Js MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Wiki Js tool call.

Deterministic rules across all 21 Wiki Js tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WIKI JS →

Free to start. No card required.

21 Wiki Js tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

Wiki Js

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL WIKI JS

// ALL 21 WIKI JS TOOLS

// RELATED SERVERS

// FAQ