// SCAN REPORT

Remnawave

153 tools. 86 can modify or destroy data without limits.

23 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

86 can modify or destroy data

67 read-only

153 tools total

Community server · catalogue entry verified 11/06/2026

How to control Remnawave ↓

TOOL MAP

Read (67) Write / Execute (63) Destructive / Financial (23)

MOST DANGEROUS TOOLS

Critical Risk

Destructive · High hwid_devices_delete_all This tool performs bulk deletion of data (all HWID devices) that cannot be undone. Destructive · High users_bulk_all_reset_traffic This tool performs an irreversible bulk operation affecting all users' traffic records. Destructive · High api_tokens_delete This tool performs an irreversible deletion operation on API tokens, which are critical security artifacts. Destructive · High billing_history_delete Deleting billing history entries cannot be undone and destroys auditable financial records, making this a destructive action with high severity.

86 of Remnawave's 153 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL REMNAWAVE

PolicyLayer is an MCP gateway — it sits between your AI agents and Remnawave, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "api_tokens_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "external_squads_remove_users": {
    "limits": [
      {
        "counter": "external_squads_remove_users_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "api_tokens_list": {
    "limits": [
      {
        "counter": "api_tokens_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Remnawave — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON REMNAWAVE →

Free to start. No card required.

ALL 153 REMNAWAVE TOOLS

DESTRUCTIVE 23 tools

Destructive api_tokens_delete Delete an API token Destructive billing_history_delete Delete a billing history entry Destructive billing_node_delete Delete a billing node Destructive billing_provider_delete Delete a billing provider Destructive config_profiles_delete Delete a config profile Destructive external_squads_delete Delete an external squad Destructive hosts_bulk_delete Bulk delete selected hosts Destructive hosts_delete Delete a host from Remnawave Destructive hwid_device_delete Delete a specific HWID device Destructive hwid_devices_delete_all Delete all HWID devices for a user Destructive node_plugins_delete Delete a node plugin Destructive node_plugins_torrent_truncate Truncate all torrent blocker reports Destructive nodes_delete Delete a node from Remnawave Destructive nodes_reset_traffic Reset traffic counter for a node Destructive snippets_delete Delete a snippet Destructive squads_delete Delete an internal squad Destructive squads_remove_users Remove users from an internal squad Destructive sub_page_configs_delete Delete a subscription page configuration Destructive users_bulk_all_reset_traffic Reset traffic counters for ALL users Destructive users_bulk_delete Bulk delete selected users Destructive users_bulk_delete_by_status Bulk delete users by status Destructive users_bulk_revoke_subscription Bulk revoke subscriptions for selected users Destructive users_delete Permanently delete a Remnawave user

EXECUTE 6 tools

Execute ip_control_drop_connections Drop active connections for specified IPs Execute node_plugins_execute Execute a node plugin Execute nodes_bulk_actions Bulk actions on selected nodes (enable/disable/restart) Execute nodes_restart Restart a specific node Execute nodes_restart_all Restart all nodes Execute system_srr_matcher Test subscription request routing rules

WRITE 57 tools

Write external_squads_remove_users Remove users from an external squad Write users_bulk_reset_traffic Bulk reset traffic for selected users Write users_reset_traffic Reset traffic counter for a Remnawave user Write users_revoke_subscription Revoke subscription for a Remnawave user (generates new subscription link) Write config_profiles_reorder Reorder config profiles Write external_squads_reorder Reorder external squads Write node_plugins_clone Clone a node plugin Write node_plugins_reorder Reorder node plugins Write nodes_reorder Reorder nodes by providing an ordered array of UUIDs Write sub_page_configs_clone Clone a subscription page configuration Write sub_page_configs_reorder Reorder subscription page configurations Write users_bulk_all_extend_expiration Extend expiration date for ALL users Write users_bulk_extend_expiration Bulk extend expiration date for selected users Write api_tokens_create Create a new API token Write billing_history_create Create a billing history entry Write billing_node_create Create a billing node Write billing_node_update Update a billing node Write billing_provider_create Create a new billing provider Write billing_provider_update Update a billing provider Write config_profiles_create Create a new config profile Write config_profiles_update Update a config profile Write external_squads_add_users Add users to an external squad Write external_squads_create Create a new external squad Write external_squads_update Update an external squad Write hosts_bulk_disable Bulk disable selected hosts Write hosts_bulk_enable Bulk enable selected hosts Write hosts_bulk_set_inbound Bulk set inbound for selected hosts Write hosts_bulk_set_port Bulk set port for selected hosts Write hosts_create Create a new host in Remnawave Write hosts_update Update an existing host Write hwid_device_create Create a HWID device entry for a user Write metadata_node_upsert Create or update metadata for a node Write metadata_user_upsert Create or update metadata for a user Write node_plugins_create Create a new node plugin Write node_plugins_update Update a node plugin Write nodes_bulk_profile_modification Bulk modify config profile for selected nodes Write nodes_bulk_update Bulk update properties for selected nodes Write nodes_create Create a new node in Remnawave Write nodes_disable Disable a node Write nodes_enable Enable a disabled node Write nodes_update Update an existing node Write settings_update Update Remnawave panel settings Write snippets_create Create a new configuration snippet Write snippets_update Update an existing snippet Write squads_add_users Add users to an internal squad Write squads_create Create a new internal squad Write squads_update Update an internal squad Write sub_page_configs_create Create a subscription page configuration Write sub_page_configs_update Update a subscription page configuration Write system_generate_x25519 Generate X25519 key pair for VLESS Reality Write users_bulk_all_update Update ALL users at once Write users_bulk_update Bulk update selected users Write users_bulk_update_squads Bulk update squad assignments for selected users Write users_create Create a new VPN user in Remnawave Write users_disable Disable a Remnawave user (block VPN access) Write users_enable Enable a disabled Remnawave user (restore VPN access) Write users_update Update an existing Remnawave user

READ 67 tools

Read api_tokens_list List all API tokens Read auth_status Check current authentication status with Remnawave panel Read billing_history_list List billing history Read billing_nodes_list List all billing nodes Read billing_provider_get Get a billing provider by UUID Read billing_providers_list List all infrastructure billing providers Read config_profiles_get Get a config profile by UUID Read config_profiles_get_computed_config Get computed configuration for a config profile Read config_profiles_get_inbounds Get inbounds for a specific config profile Read config_profiles_list List all config profiles Read external_squads_get Get an external squad by UUID Read external_squads_list List all external squads Read hosts_get Get a specific host by UUID Read hosts_list List all Remnawave hosts Read hosts_tags_list List all host tags Read hwid_devices_list List HWID devices for a specific user Read hwid_devices_list_all List all HWID devices across all users Read hwid_stats Get HWID device statistics Read hwid_top_users Get users with most HWID devices Read inbounds_list List all inbounds from all config profiles Read ip_control_fetch_ips Fetch active IPs for a user (async job) Read ip_control_fetch_users_ips Fetch IPs for all users on a node (async job) Read ip_control_get_fetch_ips_result Get result of an IP fetch job Read ip_control_get_fetch_users_ips_result Get result of a users IP fetch job Read keygen_get Generate a new SECRET_KEY for node configuration Read metadata_node_get Get metadata for a specific node Read metadata_user_get Get metadata for a specific user Read node_plugins_get Get a node plugin by UUID Read node_plugins_list List all node plugins Read node_plugins_torrent_reports Get torrent blocker reports Read node_plugins_torrent_stats Get torrent blocker statistics Read nodes_get Get a specific node by UUID Read nodes_list List all Remnawave nodes Read nodes_tags_list List all node tags Read settings_get Get Remnawave panel settings Read snippets_list List all configuration snippets Read squads_accessible_nodes Get nodes accessible to a specific squad Read squads_list List all internal squads Read sub_page_configs_get Get a subscription page config by UUID Read sub_page_configs_list List all subscription page configurations Read subscription_info Get subscription info by short UUID (public endpoint) Read subscription_request_history_list List subscription request history Read subscription_request_history_stats Get subscription request history statistics Read subscriptions_get_by_short_uuid Get subscription details by short UUID Read subscriptions_get_by_username Get subscription details by username Read subscriptions_get_by_uuid Get subscription details by UUID Read subscriptions_get_connection_keys Get connection keys for a subscription Read subscriptions_get_raw_by_short_uuid Get raw subscription config by short UUID Read subscriptions_get_subpage_config Get subscription page configuration Read subscriptions_list List all subscriptions with pagination Read system_bandwidth_stats Get bandwidth statistics Read system_health Check Remnawave panel health status Read system_metadata Get Remnawave panel metadata and version information Read system_nodes_metrics Get detailed node metrics Read system_nodes_statistics Get node statistics Read system_stats Get overall Remnawave panel statistics (users, nodes, traffic, memory, CPU) Read system_stats_recap Get system statistics recap Read users_get Get a specific Remnawave user by their UUID Read users_get_by_email Get a Remnawave user by their email Read users_get_by_short_uuid Get a Remnawave user by their short UUID Read users_get_by_subscription_uuid Get a Remnawave user by subscription UUID Read users_get_by_tag Get Remnawave users by tag Read users_get_by_telegram_id Get a Remnawave user by their Telegram ID Read users_get_by_username Get a Remnawave user by their username Read users_list List all Remnawave VPN users with pagination Read users_tags_list List all user tags Read users_resolve Search and resolve users by query

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent delete data through the Remnawave MCP server? +

Yes. The Remnawave server exposes 23 destructive tools including api_tokens_delete, billing_history_delete, billing_node_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Remnawave? +

The Remnawave server has 57 write tools including external_squads_remove_users, users_bulk_reset_traffic, users_reset_traffic. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Remnawave.

How many tools does the Remnawave MCP server expose? +

153 tools across 4 categories: Destructive, Execute, Read, Write. 67 are read-only. 86 can modify, create, or delete data.

How do I enforce a policy on Remnawave? +

Register the Remnawave MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Remnawave tool call.

Deterministic rules across all 153 Remnawave tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON REMNAWAVE →

Free to start. No card required.

153 Remnawave tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

Remnawave

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL REMNAWAVE

// ALL 153 REMNAWAVE TOOLS

// RELATED SERVERS

// FAQ