# Excluded Tools Certain endpoints are intentionally excluded due to security, complexity, or contextual concerns. ## Excluded Groups Summary * **User Management (23 endpoints)** - User creation/deletion, password operations, 2FA management, and client credentials pose significant security risks * **User Group Membership (3 endpoints)** - Permission escalation risks from AI-driven group membership changes * **Security Operations (4 endpoints)** - Password reset workflows require email verification and user interaction * **Import/Export (9 endpoints)** - Complex file operations better handled through the Umbraco UI * **Package Management (9 endpoints)** - Package creation and migration involve system-wide changes * **Cache Operations (3 endpoints)** - Cache rebuild can impact system performance * **Telemetry (3 endpoints)** - System telemetry configuration and data collection * **Install/Upgrade (5 endpoints)** - One-time system setup and upgrade operations * **Preview/Profiling (4 endpoints)** - Frontend-specific debugging functionality * **Document Operations (2 endpoints)** - Preview URL and validation endpoints * **Member Type Folders (4 endpoints)** - Non-functional in the current Umbraco API * **Other (9 endpoints)** - Internal system functionality, oEmbed, dynamic roots, object types, help, news, search ## Ignored Endpoints These endpoints are intentionally not implemented in the MCP server, typically because they: * Are related to import/export functionality that may not be suitable for MCP operations * Have security implications * Are not applicable in the MCP context ## Ignored by Category ### DocumentType (3 endpoints) * `getDocumentTypeByIdExport` - Export functionality * `postDocumentTypeImport` - Import functionality * `putDocumentTypeByIdImport` - Import functionality ### Dictionary (2 endpoints) * `getDictionaryByIdExport` - Export functionality * `postDictionaryImport` - Import functionality ### Document (2 endpoints) * `getDocumentByIdPreviewUrl` - Preview URL functionality (frontend-specific) * `putUmbracoManagementApiV11DocumentByIdValidate11` - Validation endpoint ### MediaType (3 endpoints) * `getMediaTypeByIdExport` - Export functionality * `postMediaTypeImport` - Import functionality * `putMediaTypeByIdImport` - Import functionality ### Media (1 endpoint) * `getItemMediaSearch` - Media search functionality (internal system functionality) ### Import (1 endpoint) * `getImportAnalyze` - Import analysis functionality ### Install (3 endpoints) * `getInstallSettings` - Installation configuration settings (system setup concerns) * `postInstallSetup` - System installation functionality (system modification risk) * `postInstallValidateDatabase` - Database validation during installation (system setup concerns) ### Help (1 endpoint) * `getHelp` - Help functionality (internal system functionality) ### Member Type (4 endpoints) * `deleteMemberTypeFolderById` - Delete member type folder (non-functional in current API) * `getMemberTypeFolderById` - Get member type folder (non-functional in current API) * `postMemberTypeFolder` - Create member type folder (non-functional in current API) * `putMemberTypeFolderById` - Update member type folder (non-functional in current API) ### Package (9 endpoints) * `deletePackageCreatedById` - Delete created package functionality * `getPackageConfiguration` - Package configuration settings * `getPackageCreated` - List created packages functionality * `getPackageCreatedById` - Get created package by ID functionality * `getPackageCreatedByIdDownload` - Download package functionality * `getPackageMigrationStatus` - Package migration status functionality * `postPackageByNameRunMigration` - Run package migration functionality * `postPackageCreated` - Create package functionality * `putPackageCreatedById` - Update created package functionality ### Security (4 endpoints) * `getSecurityConfiguration` - Security configuration settings * `postSecurityForgotPassword` - Password reset functionality * `postSecurityForgotPasswordReset` - Password reset confirmation functionality * `postSecurityForgotPasswordVerify` - Password reset verification functionality ### User Groups (3 endpoints) * `deleteUserGroupByIdUsers` - Remove users from groups (permission escalation risk) * `postUserGroupByIdUsers` - Add users to groups (permission escalation risk) * `postUserSetUserGroups` - Set user's group memberships (permission escalation risk) ### Telemetry (3 endpoints) * `getTelemetry` - System telemetry data collection (privacy concerns) * `getTelemetryLevel` - Telemetry configuration exposure (privacy concerns) * `postTelemetryLevel` - Telemetry settings modification (privacy concerns) ### PublishedCache (3 endpoints) * `getPublishedCacheRebuildStatus` - Cache rebuild status monitoring (system performance concerns) * `postPublishedCacheRebuild` - Cache rebuild operations (system performance/stability risk) * `postPublishedCacheReload` - Cache reload operations (system performance/stability risk) ### Upgrade (2 endpoints) * `getUpgradeSettings` - System upgrade configuration settings (system setup concerns) * `postUpgradeAuthorize` - System upgrade authorization functionality (system modification risk) ### User (23 endpoints) * `postUser` - User creation functionality (account proliferation/privilege escalation risk) * `deleteUser` - User deletion functionality (denial of service/data loss risk) * `deleteUserById` - User deletion by ID functionality (denial of service/data loss risk) * `putUserById` - User update functionality (permission escalation/authentication bypass risk) * `postUserByIdChangePassword` - Password change functionality (security risk) * `postUserByIdResetPassword` - Password reset functionality (security risk) * `postUserCurrentChangePassword` - Current user password change (security risk) * `postUserByIdClientCredentials` - Client credentials management (security risk) * `getUserByIdClientCredentials` - Client credentials exposure (security risk) * `deleteUserByIdClientCredentialsByClientId` - Client credentials manipulation (security risk) * `getUserById2fa` - 2FA management (security risk) * `deleteUserById2faByProviderName` - 2FA bypass risk (security risk) * `getUserCurrent2fa` - 2FA exposure (security risk) * `deleteUserCurrent2faByProviderName` - 2FA bypass risk (security risk) * `postUserCurrent2faByProviderName` - 2FA manipulation (security risk) * `getUserCurrent2faByProviderName` - 2FA exposure (security risk) * `postUserInvite` - User invitation abuse potential (security risk) * `postUserInviteCreatePassword` - Invitation hijacking risk (security risk) * `postUserInviteResend` - Spam/abuse potential (security risk) * `postUserInviteVerify` - Invitation manipulation (security risk) * `postUserDisable` - User account lockout risk (security risk) * `postUserEnable` - Compromised account activation risk (security risk) * `postUserUnlock` - Account security bypass risk (security risk) ### Profiling (2 endpoints) * `getProfilingStatus` - System profiling status monitoring (system performance/debugging concerns) * `putProfilingStatus` - System profiling configuration changes (system performance/stability risk) ### Preview (2 endpoints) * `deletePreview` - Content preview deletion (frontend-specific functionality) * `postPreview` - Content preview creation (frontend-specific functionality) ### Oembed (1 endpoint) * `getOembedQuery` - oEmbed media embedding functionality (frontend-specific functionality) ### Object (1 endpoint) * `getObjectTypes` - System object type enumeration (internal system functionality) ### Dynamic (2 endpoints) * `getDynamicRootSteps` - Dynamic root configuration steps (advanced configuration functionality) * `postDynamicRootQuery` - Dynamic root query processing (advanced configuration functionality) ### News (1 endpoint) * `getNewsDashboard` - News dashboard functionality (internal system functionality) ### Relation Type (1 endpoint) * `getItemRelationType` - Relation type item functionality (internal system functionality) ### Segment (1 endpoint) * `getSegment` - Segment functionality (internal system functionality) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.umbraco.com/umbraco-in-ai/mcp/cms-developer-mcp/excluded-tools.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.