---
title: "Set the enabled destructive MCP operations (org.mcp.destructive.manage; ADMIN+ default)"
method: PUT
path: "/organizations/{id}/mcp-destructive-policy"
tags: ["organizations"]
---

# Set the enabled destructive MCP operations (org.mcp.destructive.manage; ADMIN+ default)

`PUT /organizations/{id}/mcp-destructive-policy`

## Request

- Base URL: `https://api.onplana.com/api`
- URL: `https://api.onplana.com/api/organizations/{id}/mcp-destructive-policy`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`

## Path parameters

- `id` string, required

## Headers

- `X-Organization-Id` string, required

## Request body

- object
  - `enabledOps` string[], required: Governed op names to enable (e.g. delete_task). Unknown names are rejected 400.

## Response `200`

Updated { enabledOps, updatedAt, updatedById }

## Other responses

- `400`: Validation error
- `401`: Unauthorized - missing or invalid JWT
- `402`: Plan gate - feature not available on current plan
- `403`: Forbidden - insufficient role

---

[API](https://skmtc.dev/onplana/apis/onplana-api.md) · [All operations](https://skmtc.dev/onplana/apis/onplana-api/llms.txt) · [OpenAPI document](https://skmtc.dev/onplana/apis/onplana-api/revisions/c3d6c89e9dc8?raw)