New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice
// SCAN REPORT

Laravel Forge

272 tools. 139 can modify or destroy data without limits.

47 destructive tools with no built-in limits. Policy required.

Last updated:

139 can modify or destroy data
133 read-only
272 tools total

Community server · catalogue entry checked 20/08/2026

How to control Laravel Forge ↓

TOOL MAP

What Laravel Forge exposes to your agents

Read (133) Write / Execute (92) Destructive / Financial (47)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Laravel Forge tools

Destructive · High delete-archived-server Delete an archived server (DELETE /orgs/{organization}/servers/archives/{server}). Destructive · High delete-background-process Delete a background process. Destructive · High delete-backup-configuration Delete a backup configuration. Destructive · High delete-backup-instance Delete a backup instance.

139 of Laravel Forge's 272 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Laravel Forge

PolicyLayer is an MCP gateway — it sits between your AI agents and Laravel Forge, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete-archived-server": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "create-archived-server": {
    "limits": [
      {
        "counter": "create-archived-server_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get-active-certificate": {
    "limits": [
      {
        "counter": "get-active-certificate_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Laravel Forge — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON LARAVEL FORGE →

Instant setup, no code required.

FULL CATALOGUE

All 272 Laravel Forge tools

DESTRUCTIVE 47 tools
Destructive delete-archived-server Delete an archived server (DELETE /orgs/{organization}/servers/archives/{server}). Destructive delete-background-process Delete a background process. Destructive delete-backup-configuration Delete a backup configuration. Destructive delete-backup-instance Delete a backup instance. Destructive delete-certificate Delete an SSL certificate. Destructive delete-composer-credential Delete a Composer credential (DELETE .../composer/credentials/{repository}). Destructive delete-database-schema Delete a database schema. Destructive delete-database-user Delete a database user. Destructive delete-deploy-key Delete the deploy key for a site. Destructive delete-domain Delete a domain. Destructive delete-firewall-rule Delete a firewall rule. Destructive delete-heartbeat Delete a heartbeat. Destructive delete-horizon-integration Disable Laravel Horizon on a site. Destructive delete-laravel-maintenance-integration Disable Laravel maintenance mode on a site. Destructive delete-laravel-scheduler-integration Disable the Laravel scheduler integration on a site. Destructive delete-monitor Delete a server monitor. Destructive delete-nginx-template Delete an nginx template. Destructive delete-npm-credential Delete an npm credential (DELETE .../npm/credentials/{registry}). Destructive delete-octane-integration Disable Laravel Octane on a site. Destructive delete-php-opcache Remove PHP OPcache configuration (DELETE /orgs/{organization}/servers/{server}/php/opcache). Destructive delete-php-version Delete an installed PHP version (DELETE /orgs/{organization}/servers/{server}/php/versions/{phpVersion}). Destructive delete-pulse-integration Disable Laravel Pulse on a site. Destructive delete-push-to-deploy Disable push-to-deploy for a site. Destructive delete-recipe Delete a recipe. Destructive delete-redirect-rule Delete a redirect rule. Destructive delete-reverb-integration Disable Laravel Reverb on a site. Destructive delete-role Delete an organization role. Destructive delete-security-rule Delete a security rule. Destructive delete-server Delete a server (DELETE /orgs/{organization}/servers/{server}). Destructive delete-server-log Clear a server log by key. Destructive delete-server-scheduled-job Delete a server scheduled job. Destructive delete-site Delete a site (DELETE /orgs/{organization}/servers/{server}/sites/{site}). Destructive delete-site-application-log Clear the application log for a site. Destructive delete-site-command Delete a site command record. Destructive delete-site-nginx-access-log Clear the nginx access log for a site. Destructive delete-site-nginx-error-log Clear the nginx error log for a site. Destructive delete-site-scheduled-job Delete a site scheduled job. Destructive delete-ssh-key Delete an SSH key from a server. Destructive delete-storage-provider Delete a storage provider. Destructive delete-team Delete a team. Destructive delete-team-invite Delete a team invitation. Destructive delete-team-member Remove a member from a team. Destructive delete-team-recipes-share Remove a recipe share from a team. Destructive delete-team-server-credentials-share Remove a server credential share from a team. Destructive delete-team-servers-share Remove a server share from a team. Destructive delete-webhook Delete a webhook. Destructive reset-deployment-status Reset deployment status and disable quick deploy for a site.
WRITE 92 tools
Write create-archived-server Archive a server (POST /orgs/{organization}/servers/archives). Write create-background-process Create a background process on a server. Write create-background-process-action Perform an action on a background process (restart, stop, or start). Write create-backup-configuration Create a backup configuration on a server. Write create-backup-instance Trigger a new backup for a backup configuration. Write create-balancer-site Create a load balancer site (POST /orgs/{organization}/servers/{server}/sites/balancer). Write create-certificate Create an SSL certificate for a domain. Write create-certificate-action Perform an action on a certificate (e.g. activate, install). Write create-composer-credential Create a Composer credential for a site (POST .../composer/credentials). Write create-database-schema Create a database schema on a server. Write create-database-user Create a database user on a server. Write create-deploy-key Create a deploy key for a site (returns existing key if one exists). Write create-deployment Trigger a new deployment for a site. Write create-domain Create a new domain for a site. Write create-domain-action Perform an action on a domain (e.g. obtain certificate, verify DNS). Write create-firewall-rule Create a firewall rule on a server. Write create-forge-recipe-run Run an official Forge recipe on one or more servers. Write create-heartbeat Create a heartbeat monitor for a site. Write create-horizon-integration Enable Laravel Horizon on a site. Write create-inertia-integration Enable Inertia SSR on a site. Write create-laravel-maintenance-integration Enable Laravel maintenance mode on a site. Write create-laravel-scheduler-integration Enable the Laravel scheduler integration on a site. Write create-monitor Create a server monitor. Write create-mysql-service-action Perform a MySQL service action (POST .../services/mysql/actions). Actions: reboot, stop. Write create-nginx-service-action Perform an Nginx service action (POST .../services/nginx/actions). Actions: reboot, stop. Write create-nginx-template Create an nginx template on a server. Write create-npm-credential Create an npm credential for a site (POST .../npm/credentials). Write create-octane-integration Enable Laravel Octane on a site. Write create-php-opcache Enable PHP OPcache configuration (POST /orgs/{organization}/servers/{server}/php/opcache). Write create-php-service-action Perform a PHP-FPM service action (POST .../services/php/actions). Actions: reboot, reload. Write create-postgres-service-action Perform a Postgres service action (POST .../services/postgres/actions). Actions: reboot, stop. Write create-pulse-integration Enable Laravel Pulse on a site. Write create-push-to-deploy Enable push-to-deploy for a site. Write create-recipe Create a new recipe for an organization. Write create-recipe-run Run a recipe on one or more servers. Write create-redirect-rule Create a redirect rule for a site. Write create-redis-service-action Perform a Redis service action (POST .../services/redis/actions). Action: reboot. Write create-reverb-integration Enable Laravel Reverb on a site. Write create-role Create a new role for an organization. Write create-security-rule Create an HTTP basic auth security rule for a site path. Write create-server Create a new server (POST /orgs/{organization}/servers). Write create-server-action Perform a server action such as reboot (POST /orgs/{organization}/servers/{server}/actions). Write create-server-scheduled-job Create a scheduled job on a server. Write create-site Create a site on a server (POST /orgs/{organization}/servers/{server}/sites). Write create-site-command Run a command on a site. Write create-site-scheduled-job Create a scheduled job for a site. Write create-ssh-key Add an SSH public key to a server. Write create-storage-provider Create a storage provider for an organization. Write create-supervisor-service-action Perform a Supervisor service action (POST .../services/supervisor/actions). Action: reboot. Write create-team Create a new team. Write create-team-invite Create a team invitation. Write create-team-recipes-share Share a recipe with a team. Write create-team-server-credentials-share Share a server credential with a team. Write create-team-servers-share Share a server with a team. Write create-vpc Create a VPC for a server credential region (POST /orgs/{organization}/server-credentials/{credential}/regions Write create-webhook Create a webhook for a site. Write install-php-version Install a PHP version on a server (POST /orgs/{organization}/servers/{server}/php/versions). Write restore-backup Restore a backup to a database. Write update-background-process Update a background process. Write update-backup-configuration Update a backup configuration. Write update-composer-credential Update a Composer credential (PUT .../composer/credentials/{repository}). Write update-database-password Update the root database password on a server. Write update-database-user Update a database user. Write update-deploy-hook Update or regenerate the deploy hook URL for a site. Write update-deployment-script Update the deployment script for a site. Write update-domain Update a domain. Write update-domain-nginx Update the Nginx configuration for a domain. Write update-heartbeat Update a heartbeat. Write update-load-balancing-nodes Update load balancing nodes for a site (PUT .../sites/{site}/load-balancing-nodes). Write update-nginx-template Update an nginx template. Write update-npm-credential Update an npm credential (PUT .../npm/credentials/{registry}). Write update-php-cli-config Update PHP CLI configuration for a version (PUT .../php/versions/{phpVersion}/configs/cli). Write update-php-cli-version Update the server PHP CLI version (PUT /orgs/{organization}/servers/{server}/php/cli-version). Write update-php-fpm-config Update PHP-FPM configuration for a version (PUT .../php/versions/{phpVersion}/configs/fpm). Write update-php-max-execution-time Update PHP max execution time (PUT /orgs/{organization}/servers/{server}/php/max-execution-time). Write update-php-max-upload-size Update PHP max upload size (PUT /orgs/{organization}/servers/{server}/php/max-upload-size). Write update-php-pool-config Update PHP pool configuration for a version (PUT .../php/versions/{phpVersion}/configs/pool). Write update-php-site-version Update the server default PHP site version (PUT /orgs/{organization}/servers/{server}/php/site-version). Write update-php-version Update an installed PHP version to the latest patch (PUT /orgs/{organization}/servers/{server}/php/versions/{p Write update-recipe Update a recipe. Write update-role Update an organization role. Write update-security-rule Update a security rule. Write update-server Update a server (PUT /orgs/{organization}/servers/{server}). Write update-server-key Regenerate the server Write update-server-network Update a server Write update-site Update a site (PUT /orgs/{organization}/servers/{server}/sites/{site}). Write update-site-environment Update a site Write update-site-healthcheck Update a site Write update-site-nginx Update a site Write update-storage-provider Update a storage provider. Write update-team Update a team. Write update-team-member Update a team member
READ 133 tools
Read get-active-certificate Get the active SSL certificate for a domain. Read get-background-process Get a background process by ID. Read get-background-process-log Get the log output for a background process. Read get-backup-configuration Get a backup configuration by ID. Read get-backup-instance Get a backup instance by ID. Read get-certificate Get an SSL certificate by ID. Read get-composer-credential Get a Composer credential by repository (GET .../composer/credentials/{repository}). Read get-database-schema Get a database schema by ID. Read get-database-user Get a database user by ID. Read get-deploy-hook Get the deploy hook URL for a site. Read get-deploy-key Get the deploy key for a site. Read get-deployment Get a deployment by ID. Read get-deployment-log Get the log output for a deployment. Read get-deployment-script Get the deployment script for a site. Read get-deployment-status Get the deployment status for a site (quick deploy state). Read get-domain Get a domain by ID. Read get-domain-dns-configurations Get DNS configuration records for a domain. Read get-domain-nginx Get the Nginx configuration for a domain. Read get-firewall-rule Get a firewall rule by ID. Read get-forge-recipe Get an official Forge recipe by ID. Read get-heartbeat Get a heartbeat by ID. Read get-horizon-integration Get Laravel Horizon integration status for a site. Read get-inertia-integration Get Inertia SSR integration status for a site. Read get-laravel-maintenance-integration Get Laravel maintenance mode integration status for a site. Read get-laravel-scheduler-integration Get Laravel scheduler integration status for a site. Read get-me Get the authenticated Forge user profile (GET /me). Read get-monitor Get a server monitor by ID. Read get-nginx-template Get an nginx template by ID. Read get-npm-credential Get an npm credential by registry (GET .../npm/credentials/{registry}). Read get-octane-integration Get Laravel Octane integration status for a site. Read get-organization Get a single organization by slug (GET /orgs/{organization}). Read get-organization-site Get a site by ID within an organization (GET /orgs/{organization}/sites/{site}). Read get-permission Get a permission by ID. Read get-php-cli-config Get PHP CLI configuration for a version (GET .../php/versions/{phpVersion}/configs/cli). Read get-php-cli-version Get the server PHP CLI version (GET /orgs/{organization}/servers/{server}/php/cli-version). Read get-php-fpm-config Get PHP-FPM configuration for a version (GET .../php/versions/{phpVersion}/configs/fpm). Read get-php-max-execution-time Get PHP max execution time settings (GET /orgs/{organization}/servers/{server}/php/max-execution-time). Read get-php-max-upload-size Get PHP max upload size settings (GET /orgs/{organization}/servers/{server}/php/max-upload-size). Read get-php-opcache Get PHP OPcache status (GET /orgs/{organization}/servers/{server}/php/opcache). Read get-php-pool-config Get PHP pool configuration for a version (GET .../php/versions/{phpVersion}/configs/pool). Read get-php-site-version Get the server default PHP site version (GET /orgs/{organization}/servers/{server}/php/site-version). Read get-php-version Get an installed PHP version (GET /orgs/{organization}/servers/{server}/php/versions/{phpVersion}). Read get-predefined-role Get a predefined role by ID. Read get-provider Get a cloud provider by ID. Read get-provider-region Get a region for a provider. Read get-provider-region-size Get a server size for a specific provider region. Read get-provider-size Get a server size for a provider. Read get-pulse-integration Get Laravel Pulse integration status for a site. Read get-recipe Get a recipe by ID. Read get-recipe-run Get a recipe run by log ID. Read get-redirect-rule Get a redirect rule by ID. Read get-reverb-integration Get Laravel Reverb integration status for a site. Read get-role Get an organization role by ID. Read get-security-rule Get a security rule by ID. Read get-server Get a server by ID (GET /orgs/{organization}/servers/{server}). Read get-server-credential Get a server credential by ID (GET /orgs/{organization}/server-credentials/{credential}). Read get-server-event Get a server event by ID (GET /orgs/{organization}/servers/{server}/events/{event}). Read get-server-event-output Get output for a server event (GET /orgs/{organization}/servers/{server}/events/{event}/output). Read get-server-key Get the server Read get-server-log Get a server log by key (e.g. nginx-error, nginx-access, php-8.4). Read get-server-network Get servers in a server Read get-server-scheduled-job Get a server scheduled job by ID. Read get-server-scheduled-job-output Get output from a server scheduled job. Read get-site-application-log Get the application log for a site. Read get-site-command Get a site command by ID. Read get-site-command-output Get output from a site command. Read get-site-environment Get a site Read get-site-healthcheck Get a site Read get-site-nginx Get a site Read get-site-nginx-access-log Get the nginx access log for a site. Read get-site-nginx-error-log Get the nginx error log for a site. Read get-site-scheduled-job Get a site scheduled job by ID. Read get-site-scheduled-job-output Get output from a site scheduled job. Read get-ssh-key Get an SSH key by ID. Read get-storage-provider Get a storage provider by ID. Read get-team Get a team by ID. Read get-team-invite Get a team invitation by ID. Read get-team-member Get a team member by user ID. Read get-user Get the authenticated Forge user (GET /user). Read get-vpc Get a VPC by ID (GET /orgs/{organization}/server-credentials/{credential}/regions/{region}/vpcs/{vpcId}). Read get-webhook Get a webhook by ID. Read list-archived-servers List archived servers for an organization (GET /orgs/{organization}/servers/archives). Read list-background-processes List background processes on a server. Read list-backup-configurations List backup configurations on a server. Read list-backup-instances List backup instances for a backup configuration. Read list-certificates List SSL certificates for a site across all domains. Read list-composer-credentials List Composer credentials for a site (GET .../sites/{site}/composer/credentials). Read list-database-schemas List database schemas on a server. Read list-database-users List database users on a server. Read list-deployments List deployments for a site. Read list-domain-certificates List SSL certificates for a domain. Read list-domains List domains for a site. Read list-firewall-rules List firewall rules on a server. Read list-forge-recipes List official Forge recipes. Read list-heartbeats List heartbeats for a site. Read list-load-balancing-nodes List load balancing nodes for a site (GET .../sites/{site}/load-balancing-nodes). Read list-monitors List server monitors (CPU, disk, memory). Read list-nginx-templates List nginx templates on a server. Read list-npm-credentials List npm credentials for a site (GET .../sites/{site}/npm/credentials). Read list-organization-sites List sites for an organization (GET /orgs/{organization}/sites). Read list-organizations List organizations the authenticated user belongs to (GET /orgs). Read list-permissions List all available permissions. Read list-php-versions List installed PHP versions on a server (GET /orgs/{organization}/servers/{server}/php/versions). Read list-predefined-roles List predefined roles available in Forge. Read list-provider-region-sizes List server sizes available in a provider region. Read list-provider-regions List regions for a provider. Read list-provider-sizes List server sizes for a provider. Read list-providers List cloud server providers. Read list-recipe-runs List runs for a recipe. Read list-recipes List recipes for an organization. Read list-redirect-rules List redirect rules for a site. Read list-role-permissions List permissions assigned to a role. Read list-roles List roles for an organization. Read list-security-rules List HTTP basic auth security rules for a site. Read list-server-credentials List server credentials for an organization (GET /orgs/{organization}/server-credentials). Read list-server-events List events for a server (GET /orgs/{organization}/servers/{server}/events). Read list-server-scheduled-jobs List scheduled jobs on a server. Read list-server-sites List sites on a server (GET /orgs/{organization}/servers/{server}/sites). Read list-servers List servers for an organization (GET /orgs/{organization}/servers). Read list-site-commands List commands run on a site. Read list-site-scheduled-jobs List scheduled jobs for a site. Read list-sites List all sites across organizations (GET /sites). Read list-ssh-keys List SSH keys installed on a server. Read list-storage-providers List storage providers for an organization. Read list-team-invites List invitations for a team. Read list-team-members List members of a team. Read list-team-recipes List recipes shared with a team. Read list-team-server-credentials List server credentials shared with a team. Read list-team-servers List servers shared with a team. Read list-teams List teams for an organization. Read list-vpcs List VPCs for a server credential region (GET /orgs/{organization}/server-credentials/{credential}/regions/{re Read list-webhooks List webhooks for a site. Read sync-database-schemas Synchronize database schemas on a server.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1662 tools
admin
Delx Mcp A2a 1082 tools
admin
Delx Protocol — Agent Recovery & Continuity 1076 tools
admin
Nodebench 824 tools
admin
MCP Framework Personal 811 tools
admin
Delx MCP Server 740 tools
admin
Binance MCP Server 734 tools
admin
Eda Agent 726 tools
admin
FAQ

Questions about Laravel Forge

Can an AI agent delete data through the Laravel Forge MCP server? +

Yes. The Laravel Forge server exposes 47 destructive tools including delete-archived-server, delete-background-process, delete-backup-configuration. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Laravel Forge? +

The Laravel Forge server has 92 write tools including create-archived-server, create-background-process, create-background-process-action. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Laravel Forge.

How many tools does the Laravel Forge MCP server expose? +

272 tools across 3 categories: Destructive, Read, Write. 133 are read-only. 139 can modify, create, or delete data.

How do I enforce a policy on Laravel Forge? +

Register the Laravel Forge MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Laravel Forge tool call.

Deterministic rules across all 272 Laravel Forge tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LARAVEL FORGE →

Instant setup, no code required.

272 Laravel Forge tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Laravel Forge's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.