Critical-risk tools in Project Guardian MCP

Critical severity Project Guardian MCP MCP Server 5 of 38 tools

5 of the 38 tools in Project Guardian MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cache_delete Destructive

Delete a value from the optional Redis companion cache
delete_data Destructive

Delete records from memory.db table
delete_entity Destructive

Delete entity/entities and their relations from project memory
delete_observation Destructive

Remove specific observation(s) from entity/entities
delete_relation Destructive

Delete relation(s) between project entities

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Project Guardian MCP

Tools at critical risk

Attacks that target this class

More on Project Guardian MCP

Enforce policy on every Project Guardian MCP tool call.