Critical-risk tools in Airtable User MCP
7 of the 67 tools in Airtable User MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_fieldDestructiveDelete a field from an Airtable table. Requires both fieldId AND the expected field name as a safety guard. First checks for downstream dependencies — if found, returns dependen...
-
delete_fieldsDestructiveDelete multiple fields from an Airtable table in a single call. Each entry requires fieldId and expectedName as a safety guard (deletion is refused if names do not match). Field...
-
delete_record_templateDestructive⚠️ DESTRUCTIVE — Permanently delete a record template. This cannot be undone.
-
delete_tableDestructiveDelete a table from an Airtable base. Requires both tableId AND the expected table name as a safety guard — refuses to delete if the name does not match. Airtable rejects deleti...
-
delete_viewDestructiveDelete a view from a table. Cannot delete the last remaining view in a table.
-
delete_view_sectionDestructiveDelete a sidebar section. Views inside the section are NOT deleted — Airtable auto-promotes them to ungrouped at the table-level position the section used to occupy. Verified 20...
-
remove_extensionDestructiveRemove an installed extension from a dashboard.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.