// SCAN REPORT

Plex

28 tools. 3 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 30 Jun 2026

3 can modify or destroy data

25 read-only

28 tools total

Community server · catalogue entry verified 30/06/2026

How to control Plex ↓

TOOL MAP

What Plex exposes to your agents

Read (25) Write / Execute (2) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Plex tools

Destructive · High cancel_recording The tool irreversibly removes a DVR recording subscription from Plex. Write · High schedule_recording The tool creates a new scheduled recording, which is a persistent modification to the Plex server's recording queue. Write · High update_recording The tool name 'update_recording' indicates modification of recording data.

3 of Plex's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Plex

PolicyLayer is an MCP gateway — it sits between your AI agents and Plex, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "cancel_recording": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "schedule_recording": {
    "limits": [
      {
        "counter": "schedule_recording_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_active_sessions": {
    "limits": [
      {
        "counter": "get_active_sessions_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Plex — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PLEX →

Instant setup, no code required.

FULL CATALOGUE

All 28 Plex tools

DESTRUCTIVE 1 tools

Destructive cancel_recording Cancel a scheduled DVR recording by subscription ID. Use get_scheduled_recordings to find the ID. This removes

WRITE 2 tools

Write schedule_recording schedule_recording Write update_recording update_recording

READ 25 tools

Read get_active_sessions List all currently active Plex playback sessions — who is watching what, on which device, with playback progre Read get_activities get_activities Read get_actors List actors present in a Plex library section for filtering or browsing by cast. Read get_butler_tasks List Plex Butler scheduled maintenance tasks (database backup, artwork cleanup, etc.) with their schedule, las Read get_children Drill into a show Read get_collection_items List the media items inside a specific Plex collection. Read get_collections List smart and manual collections in a Plex library section. Read get_directors List directors present in a Plex library section for filtering or browsing by director. Read get_genres List all genres present in a Plex library section. Use these values with get_library_contents genre filter. Read get_libraries List all Plex library sections with their IDs, types, and item counts. Read get_library_contents List media items in a Plex library section with inline quality details (resolution, bitrate, codec). Supports Read get_live_tv_guide get_live_tv_guide Read get_media_extras Get trailers, featurettes, interviews, and other extras attached to a media item. Read get_media_info Get full metadata for a single media item by its Plex rating key. Read get_on_deck Get in-progress / continue-watching items with percent-watched progress. Read get_random_items Get a random selection from a library section, with optional filters. Combine with genre/unwatched filters for Read get_recently_added Get recently added media items across all libraries, or scoped to a specific section. Read get_recording_conflicts Identify duplicate DVR recording subscriptions — same show or GUID scheduled more than once. Groups by guid (p Read get_related Get Plex Read get_scheduled_recordings List all DVR recording subscriptions grouped by type (one-shot episodes vs. series season passes) with IDs, ch Read get_server_info Get Plex Media Server details: friendly name, version, platform, Plex Pass status, active transcode count, and Read get_server_statistics Get Plex Media Server bandwidth statistics — total data transferred, broken down by LAN vs WAN, over a chosen Read get_transcode_sessions List active Plex transcode sessions. Each session is labeled as Recording (DVR) or Playback (streaming). Inclu Read get_watch_history Get playback history — what was watched, when, and how far. Use for Read search_media Full-text search for movies, TV shows, episodes, or music. Optionally scope to a specific library section and/

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Plex

Can an AI agent delete data through the Plex MCP server? +

Yes. The Plex server exposes 1 destructive tools including cancel_recording. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Plex? +

The Plex server has 2 write tools including schedule_recording, update_recording. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Plex.

How many tools does the Plex MCP server expose? +

28 tools across 3 categories: Destructive, Read, Write. 25 are read-only. 3 can modify, create, or delete data.

How do I enforce a policy on Plex? +

Register the Plex MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Plex tool call.

Deterministic rules across all 28 Plex tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PLEX →

Instant setup, no code required.

28 Plex tools catalogued and risk-classified — across an index of 43,000+ MCP servers.