Critical-risk tools in Airtable User MCP

Critical severity Airtable User MCP MCP Server 4 of 37 tools

4 of the 37 tools in Airtable User MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_field Destructive 4/5

Delete a field from an Airtable table. Requires both fieldId AND the expected field name as a safety guard. First checks for downstream dependencies — if found, returns dependen...
delete_table Destructive 4/5

Delete a table from an Airtable base. Requires both tableId AND the expected table name as a safety guard — refuses to delete if the name does not match. Airtable rejects deleti...
delete_view Destructive 4/5

Delete a view from a table. Cannot delete the last remaining view in a table.
remove_extension Destructive 4/5

Remove an installed extension from a dashboard.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Airtable User MCP

Tools at critical risk

Attacks that target this class

More on Airtable User MCP

Enforce policy on Airtable User MCP