Critical-risk tools in Unreal-MCP
31 of the 286 tools in Unreal-MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cleanup_material_functionDestructivecleanup_material_function
-
cleanup_material_graphDestructivecleanup_material_graph
-
clear_niagara_module_inputDestructiveclear_niagara_module_input
-
delete_actorDestructiveDelete an actor from the level by name.
-
delete_assetDestructiveDelete an asset or directory from the Content Browser.
-
delete_blueprint_functionDestructiveDelete a function from a Blueprint.
-
delete_blueprint_nodeDestructiveDelete a node from a Blueprint graph by GUID.
-
delete_data_table_rowDestructiveDelete a row from a Data Table by name.
-
delete_material_expressionDestructiveDelete a single expression node by index. Recompiles and saves automatically.
-
delete_niagara_graph_nodeDestructiveDelete a node from a Niagara graph (asset + edit-copy).
-
delete_niagara_scratch_pad_moduleDestructiveDelete a scratch pad module from a Niagara System.
-
delete_niagara_systemDestructiveDelete a Niagara System asset.
-
remove_input_action_modifierDestructiveRemove a modifier from an Input Action by index.
-
remove_input_action_triggerDestructiveRemove a trigger from an Input Action by index.
-
remove_key_mappingDestructiveremove_key_mapping
-
remove_mapping_modifierDestructiveRemove a modifier from a mapping in an Input Mapping Context.
-
remove_mapping_triggerDestructiveRemove a trigger from a mapping in an Input Mapping Context.
-
remove_mass_config_traitDestructiveremove_mass_config_trait
-
remove_niagara_custom_hlsl_pinDestructiveRemove a pin from a Custom HLSL node and rebuild its signature.
-
remove_niagara_emitterDestructiveRemove an emitter from a Niagara System by name.
-
remove_niagara_moduleDestructiveremove_niagara_module
-
remove_niagara_node_pinDestructiveRemove a dynamic pin from any node in a scratch pad graph.
-
remove_niagara_rendererDestructiveRemove a renderer from an emitter by index.
-
remove_niagara_script_parameterDestructiveRemove a named input or output parameter from a Niagara script.
-
remove_niagara_user_parameterDestructiveRemove a user parameter from a Niagara System.
-
remove_statetree_bindingDestructiveRemove a property binding by index.
-
remove_statetree_nodeDestructiveRemove a task, evaluator, or condition by GUID.
-
remove_statetree_parameterDestructiveRemove a tree-level parameter by name.
-
remove_statetree_stateDestructiveRemove a state and all its children from the tree.
-
remove_statetree_transitionDestructiveRemove a transition from a state.
-
remove_widgetDestructiveRemove a widget and its children. Cannot remove the root widget.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.