Critical-risk tools in Claude C2

Critical severity Claude C2 MCP Server 6 of 94 tools

6 of the 94 tools in Claude C2 are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

kill Destructive

Kill process. Auto-selects client.
mv Destructive

Move/rename file. Auto-selects client.
persist_remove Destructive

Remove persistence. Auto-selects client.
reg_delete Destructive

Delete registry key/value. Auto-selects client.
rm Destructive

Delete file/directory. Auto-selects client.
timestomp Destructive

Modify file timestamps. Auto-selects client.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Claude C2

Tools at critical risk

Attacks that target this class

More on Claude C2

Enforce policy on every Claude C2 tool call.