// SCAN REPORT

BuddyPress MCP Server

83 tools. 48 can modify or destroy data without limits.

17 destructive tools with no built-in limits. Policy required.

Last updated:

48 can modify or destroy data
35 read-only
83 tools total

Community server · catalogue entry verified 29/06/2026

How to control BuddyPress MCP Server ↓

TOOL MAP

What BuddyPress MCP Server exposes to your agents

Read (35) Write / Execute (31) Destructive / Financial (17)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous BuddyPress MCP Server tools

Destructive · High buddypress_delete_activity This tool performs irreversible deletion of data (activity items) in a BuddyPress community. Destructive · High buddypress_delete_friendship The tool performs an irreversible deletion of friendship data. Destructive · High buddypress_delete_group This tool deletes a group, which is an irreversible operation that cannot be undone. Destructive · High buddypress_delete_group_avatar The tool performs irreversible deletion of data (group avatar), fitting the Destructive category.

48 of BuddyPress MCP Server's 83 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control BuddyPress MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and BuddyPress MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "buddypress_delete_activity": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "buddypress_accept_friendship": {
    "limits": [
      {
        "counter": "buddypress_accept_friendship_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "buddypress_get_activity": {
    "limits": [
      {
        "counter": "buddypress_get_activity_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register BuddyPress MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON BUDDYPRESS →

Instant setup, no code required.

FULL CATALOGUE

All 83 BuddyPress MCP Server tools

DESTRUCTIVE 17 tools
Destructive buddypress_delete_activity Delete an activity item Destructive buddypress_delete_friendship Delete/reject a friendship Destructive buddypress_delete_group Delete a group Destructive buddypress_delete_group_avatar Delete a group avatar (reset to default) Destructive buddypress_delete_group_cover Delete a group cover image Destructive buddypress_delete_group_invite Delete/reject a group invite Destructive buddypress_delete_member Delete a member Destructive buddypress_delete_member_avatar Delete a member avatar (reset to default) Destructive buddypress_delete_member_cover Delete a member cover image Destructive buddypress_delete_message Delete a message thread Destructive buddypress_delete_notification Delete a notification Destructive buddypress_delete_signup Delete a pending signup Destructive buddypress_delete_sitewide_notice Delete a sitewide notice Destructive buddypress_delete_xprofile_data Delete XProfile data for a specific user and field Destructive buddypress_delete_xprofile_field Delete an XProfile field Destructive buddypress_delete_xprofile_group Delete an XProfile field group Destructive buddypress_remove_group_member Remove a member from a group
EXECUTE 1 tools
Execute wordpress_execute_ability Execute a WordPress ability. Supports GET (read-only), POST (action), and DELETE methods. Input is sent as que
WRITE 30 tools
Write buddypress_accept_friendship Accept a pending friendship request Write buddypress_accept_group_invite Accept a group invite Write buddypress_accept_membership_request Accept a pending group membership request Write buddypress_activate_signup Activate a pending signup Write buddypress_add_group_member Add a member to a group Write buddypress_create_activity Create a new activity item Write buddypress_create_friendship Create a friendship request Write buddypress_create_group Create a new group Write buddypress_create_group_invite Create a group invite Write buddypress_create_membership_request Create a group membership request (request to join a private group) Write buddypress_create_message Create a new message Write buddypress_create_signup Create a new signup/registration Write buddypress_create_sitewide_notice Create a new sitewide notice Write buddypress_create_xprofile_field Create a new XProfile field Write buddypress_create_xprofile_group Create a new XProfile field group Write buddypress_dismiss_sitewide_notice Dismiss a sitewide notice for the current user Write buddypress_favorite_activity Favorite or unfavorite an activity item Write buddypress_reject_membership_request Reject/delete a pending group membership request Write buddypress_resend_signup Resend activation email for a signup Write buddypress_star_message Star or unstar a message Write buddypress_update_activity Update an existing activity item Write buddypress_update_group Update an existing group Write buddypress_update_group_member Update a group member role (promote/demote/ban) Write buddypress_update_member Update member profile information Write buddypress_update_message_thread Update a message thread (mark read/unread) Write buddypress_update_notification Update notification (mark as read/unread) Write buddypress_update_sitewide_notice Update a sitewide notice Write buddypress_update_xprofile_data Update XProfile data for a specific user and field Write buddypress_update_xprofile_field Update an XProfile field Write buddypress_update_xprofile_group Update an XProfile field group
READ 35 tools
Read buddypress_get_activity Get a single activity item by ID Read buddypress_get_group Get a single group by ID Read buddypress_get_group_avatar Get a group avatar URL Read buddypress_get_group_cover Get a group cover image URL Read buddypress_get_group_invite Get a single group invite Read buddypress_get_member Get a single member by ID Read buddypress_get_member_avatar Get a member avatar URL Read buddypress_get_member_cover Get a member cover image URL Read buddypress_get_membership_request Get a single group membership request Read buddypress_get_message Get a single message thread Read buddypress_get_notification Get a single notification Read buddypress_get_signup Get a single signup Read buddypress_get_sitewide_notice Get a single sitewide notice Read buddypress_get_xprofile_data Get XProfile data for a specific user and field Read buddypress_get_xprofile_field Get a single XProfile field Read buddypress_get_xprofile_group Get a single XProfile field group Read buddypress_list_activities List activity stream items with optional filters Read buddypress_list_components List BuddyPress components and their status Read buddypress_list_friends List friendships Read buddypress_list_group_invites List group invites Read buddypress_list_group_members List members of a specific group Read buddypress_list_groups List BuddyPress groups with optional filters Read buddypress_list_members List BuddyPress members with optional filters Read buddypress_list_membership_requests List pending group membership requests Read buddypress_list_messages List message threads Read buddypress_list_notifications List notifications Read buddypress_list_signups List pending signups/registrations Read buddypress_list_sitewide_notices List sitewide notices Read buddypress_list_xprofile_fields List XProfile fields Read buddypress_list_xprofile_groups List XProfile field groups Read buddypress_toggle_component Activate or deactivate a BuddyPress component Read wordpress_get_ability Get full details of a single WordPress ability including its input/output schema, annotations, and metadata Read wordpress_get_ability_category Get details of a single ability category Read wordpress_list_abilities List registered WordPress abilities. Supports filtering by category and pagination. Returns abilities from all Read wordpress_list_ability_categories List all registered ability categories
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about BuddyPress MCP Server

Can an AI agent delete data through the BuddyPress MCP Server MCP server? +

Yes. The BuddyPress MCP Server server exposes 17 destructive tools including buddypress_delete_activity, buddypress_delete_friendship, buddypress_delete_group. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through BuddyPress MCP Server? +

The BuddyPress MCP Server server has 30 write tools including buddypress_accept_friendship, buddypress_accept_group_invite, buddypress_accept_membership_request. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach BuddyPress MCP Server.

How many tools does the BuddyPress MCP Server MCP server expose? +

83 tools across 4 categories: Destructive, Execute, Read, Write. 35 are read-only. 48 can modify, create, or delete data.

How do I enforce a policy on BuddyPress MCP Server? +

Register the BuddyPress MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every BuddyPress MCP Server tool call.

Deterministic rules across all 83 BuddyPress MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON BUDDYPRESS →

Instant setup, no code required.

83 BuddyPress MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.