// SCAN REPORT

Ludus FastMCP

231 tools. 108 can modify or destroy data without limits.

21 destructive tools with no built-in limits. Policy required.

Last updated: 6 Aug 2026

108 can modify or destroy data

123 read-only

231 tools total

Community server · catalogue entry checked 06/08/2026

How to control Ludus FastMCP ↓

TOOL MAP

What Ludus FastMCP exposes to your agents

Read (123) Write / Execute (84) Destructive / Financial (21)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ludus FastMCP tools

Destructive · High batch_remove_snapshots Snapshot removal is a destructive operation that cannot be undone. Destructive · High clear_range_access This tool destroys access permissions in a way that cannot be trivially undone without administrative intervention. Destructive · High abort_and_remove_range The term 'remove' in the context of range management implies irreversible deletion or destruction of cyber range resources. Destructive · High delete_blueprint The tool explicitly deletes a blueprint, which is an irreversible destructive action.

108 of Ludus FastMCP's 231 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ludus FastMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Ludus FastMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "abort_and_remove_range": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_ranges_to_group": {
    "limits": [
      {
        "counter": "add_ranges_to_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "allow_testing_domains": {
    "limits": [
      {
        "counter": "allow_testing_domains_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ludus FastMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON LUDUS FASTMCP →

Instant setup, no code required.

FULL CATALOGUE

All 231 Ludus FastMCP tools

DESTRUCTIVE 21 tools

EXECUTE 33 tools

Execute abort_template_build Abort the running packer build(s). Execute apply_adversary_profile apply_adversary_profile Execute apply_blueprint_to_range Apply a blueprint to a range. Execute apply_defender_profile apply_defender_profile Execute batch_power_on_hosts batch_power_on_hosts Execute batch_snapshot_hosts batch_snapshot_hosts Execute build_container_based_template build_container_based_template Execute build_range_from_description build_range_from_description Execute build_range_from_scratch build_range_from_scratch Execute build_range_from_skeleton build_range_from_skeleton Execute build_template build_template Execute bulk_vm_operations bulk_vm_operations Execute deploy_range deploy_range Execute deploy_range_from_blueprint deploy_range_from_blueprint Execute deploy_scenario deploy_scenario Execute git_sync git_sync Execute health_checks Run health checks on all VMs in the range. Execute install_blueprint install_blueprint Execute install_from_source install_from_source Execute install_galaxy_role install_galaxy_role Execute install_role install_role Execute install_role_from_url install_role_from_url Execute migrate_sqlite_to_pocketbase Migrate from SQLite to PocketBase. Execute migrate_to_sdn Migrate to SDN networking. Execute optimize_resource_allocation Optimize resource allocation for the range. Execute power_on_range Power on all VMs in the range. Execute schedule_range_tasks schedule_range_tasks Execute security_audit Run security audit on the range. Execute setup_sdn Setup SDN infrastructure. Execute smart_deploy smart_deploy Execute start_testing Start testing state for the range. Execute stop_testing Stop testing state for the range. Execute test_network_connectivity test_network_connectivity

WRITE 51 tools

Write add_ranges_to_group Add ranges to a group. Write add_source add_source Write add_template add_template Write add_user add_user Write add_users_to_group Add users to a group. Write assign_range_to_user Assign range access to a user. Write clone_and_modify_scenario clone_and_modify_scenario Write clone_range Clone the current range to another user. Write configure_ssh_role_installation configure_ssh_role_installation Write copy_blueprint copy_blueprint Write create_blueprint create_blueprint Write create_blueprint_from_range Create a reusable blueprint from an existing range. Write create_container_template create_container_template Write create_custom_os_template create_custom_os_template Write create_custom_range_from_scenario create_custom_range_from_scenario Write create_custom_template create_custom_template Write create_deployment_pipeline Create a deployment pipeline with multiple stages. Write create_group Create a new group. Write create_kali_weekly_template create_kali_weekly_template Write create_new_range Create a new range. Write create_scenario_playbook create_scenario_playbook Write export_blueprint export_blueprint Write export_lab_guide export_lab_guide Write export_range_backup Export a range backup (configuration and snapshot metadata). Write generate_range_documentation generate_range_documentation Write grant_range_access grant_range_access Write import_blueprint Import a blueprint from a .tar.gz archive. Write import_community_scenario import_community_scenario Write import_range_backup import_range_backup Write install_subscription_roles Install subscription roles (Ludus 2.0 Enterprise only). Write move_ansible_role_scope move_ansible_role_scope Write provision_oauth2_user Provision an OAuth2 user (Ludus 2.0 only). Write publish_scenario publish_scenario Write regenerate_user_apikey regenerate_user_apikey Write rotate_credentials rotate_credentials Write schedule_maintenance_window schedule_maintenance_window Write schedule_snapshots schedule_snapshots Write set_auto_shutdown set_auto_shutdown Write set_default_range Set user's default range. Write set_group_quotas set_group_quotas Write set_user_quotas set_user_quotas Write share_blueprint_with_groups Share a blueprint with groups. Write share_blueprint_with_users Share a blueprint with users. Write share_range_config share_range_config Write snapshot_host snapshot_host Write unshare_blueprint_with_groups Unshare a blueprint from groups. Write unshare_blueprint_with_users Unshare a blueprint from users. Write update_blueprint_config Update blueprint configuration. Write update_range_config Update range configuration. Write update_source update_source Write update_testing_vm update_testing_vm

READ 123 tools

OTHER 3 tools

Other ensure_scenario_roles ensure_scenario_roles Other generate_config_from_description generate_config_from_description Other handle_adws_recovery handle_adws_recovery

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ludus FastMCP

Can an AI agent delete data through the Ludus Fast MCP server? +

Yes. The Ludus FastMCP server exposes 21 destructive tools including abort_and_remove_range, abort_range_deployment, batch_remove_snapshots. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ludus FastMCP? +

The Ludus FastMCP server has 51 write tools including add_ranges_to_group, add_source, add_template. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ludus FastMCP.

How many tools does the Ludus Fast MCP server expose? +

231 tools across 4 categories: Destructive, Execute, Read, Write. 123 are read-only. 108 can modify, create, or delete data.

How do I enforce a policy on Ludus FastMCP? +

Register the Ludus Fast MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ludus FastMCP tool call.

Deterministic rules across all 231 Ludus FastMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LUDUS FASTMCP →

Instant setup, no code required.

231 Ludus FastMCP tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Ludus Fast's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →