Critical-risk tools in AbraFlexi

Critical severity AbraFlexi MCP Server 12 of 64 tools

12 of the 64 tools in AbraFlexi are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

contact_delete Destructive

Delete a contact/company from AbraFlexi.
evidence_delete Destructive

Delete a record from any AbraFlexi evidence.
evidence_delete_attachment Destructive

Delete an attachment from a record.
evidence_storno Destructive

Cancel (storno) a document record in any AbraFlexi evidence.
invoice_issued_delete Destructive

Delete an issued invoice from AbraFlexi.
invoice_issued_unlink_zdd Destructive

Remove an advance tax document (ZDD) bonding from an issued invoice (Vazby ZDD).
product_delete Destructive

Delete a product from AbraFlexi.
bank_transaction_create Financial

bank_transaction_create
invoice_issued_cash_payment Financial

invoice_issued_cash_payment
invoice_issued_deduct_advance Financial

invoice_issued_deduct_advance
invoice_issued_deduct_zdd Financial

invoice_issued_deduct_zdd
invoice_issued_match_payment Financial

invoice_issued_match_payment

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in AbraFlexi

Tools at critical risk

Attacks that target this class

More on AbraFlexi

Enforce policy on every AbraFlexi tool call.