PocketBase MCP Server MCP Server — 24 Tools with Risk Policies

READ TOOLS

4

get_collection_schema Get schema details for a collection list_auth_methods List all available authentication methods list_records List records from a collection with optional filters query_collection Advanced query with filtering, sorting, and aggregation

WRITE TOOLS

17

auth_refresh Refresh authentication token authenticate_user Authenticate a user with email and password authenticate_with_oauth2 Authenticate a user with OAuth2 authenticate_with_otp Authenticate a user with one-time password backup_database Create a backup of the PocketBase database confirm_email_change Confirm email change with token confirm_verification Confirm email verification with token create_collection Create a new collection in PocketBase create_record Create a new record in a collection create_user Create a new user account impersonate_user Impersonate another user (admin only) import_data Import data into a collection manage_indexes Manage collection indexes migrate_collection Migrate collection schema with data preservation request_email_change Request email change request_verification Request email verification update_record Update an existing record

DESTRUCTIVE TOOLS

3

confirm_password_reset Confirm password reset with token delete_record Delete a record request_password_reset Request password reset

// FAQ

How many tools does the PocketBase MCP Server MCP server have? +

The PocketBase MCP Server MCP server exposes 24 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on PocketBase MCP Server tools? +

Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the PocketBase MCP Server server.

What risk categories do PocketBase MCP Server tools fall into? +

PocketBase MCP Server tools are categorised as Read (4), Write (17), Destructive (3). Each category has a recommended default policy.

POCKETBASE MCP SERVER TOOLS

READ TOOLS

WRITE TOOLS

DESTRUCTIVE TOOLS

Let agents act without letting them run wild.