// SCAN REPORT

Oracle MCP Server

17 tools. 4 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

4 can modify or destroy data

13 read-only

17 tools total

Community server · catalogue entry verified 29/06/2026

How to control Oracle MCP Server ↓

TOOL MAP

What Oracle MCP Server exposes to your agents

Read (13) Write / Execute (2) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Oracle MCP Server tools

Destructive · Critical exec_ddl_sql The exec_ddl_sql tool permits execution of DDL (Data Definition Language) commands including DROP, which irreversibly deletes database objects, tables, schemas, and associated data. Destructive · Critical exec_dml_sql This tool executes DML operations including DELETE and TRUNCATE, which can irreversibly destroy or modify data at scale. Execute · High exec_pro_sql This tool executes PL/SQL code, which can perform arbitrary database operations depending on what code is passed to it. Execute · Medium rebuild_schema_cache The name suggests this tool triggers a rebuild/refresh of a schema cache, which is an operational action (not a simple read).

4 of Oracle MCP Server's 17 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Oracle MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Oracle MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "exec_ddl_sql": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Cap read operations

{
  "get_database_vendor_info": {
    "limits": [
      {
        "counter": "get_database_vendor_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Oracle MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ORACLE →

Instant setup, no code required.

FULL CATALOGUE

All 17 Oracle MCP Server tools

DESTRUCTIVE 2 tools

Destructive exec_ddl_sql Execute create/drop/alter to the oracle database Destructive exec_dml_sql Execute insert/update/delete/truncate to the oracle database

EXECUTE 2 tools

Execute exec_pro_sql Execute PL/SQL code blocks including stored procedures, functions and anonymous blocks Execute rebuild_schema_cache rebuild_schema_cache

READ 13 tools

Read get_database_vendor_info get_database_vendor_info Read get_dependent_objects get_dependent_objects Read get_object_source get_object_source Read get_pl_sql_objects get_pl_sql_objects Read get_related_tables get_related_tables Read get_table_constraints get_table_constraints Read get_table_indexes get_table_indexes Read get_table_schema get_table_schema Read get_tables_schema get_tables_schema Read get_user_defined_types get_user_defined_types Read read_query Execute SELECT queries to read data from the oracle database Read search_columns search_columns Read search_tables_schema search_tables_schema

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Oracle MCP Server

Can an AI agent delete data through the Oracle MCP Server MCP server? +

Yes. The Oracle MCP Server server exposes 2 destructive tools including exec_ddl_sql, exec_dml_sql. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How many tools does the Oracle MCP Server MCP server expose? +

17 tools across 3 categories: Destructive, Execute, Read. 13 are read-only. 4 can modify, create, or delete data.

How do I enforce a policy on Oracle MCP Server? +

Register the Oracle MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Oracle MCP Server tool call.

Deterministic rules across all 17 Oracle MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ORACLE →

Instant setup, no code required.

17 Oracle MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.