Critical-risk tools in Elevenlabs

Critical severity Elevenlabs MCP Server 46 of 390 tools

46 of the 390 tools in Elevenlabs are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_batch_call Destructive

Cancel A Batch Call.
cancel_crawl_job_route Destructive

Cancel Crawl Job.
cancel_file_upload_route Destructive

Delete File Upload.
delete_agent_conversation_ticket_route Destructive

Delete Agent Conversation Ticket.
delete_agent_draft_route Destructive

Delete Agent Draft.
delete_agent_hold_audio_route Destructive

Delete Agent Hold Audio.
delete_agent_route Destructive

Delete Agent.
delete_agent_test_folder_route Destructive

Delete Agent Test Folder.
delete_asset_endpoint Destructive

Delete Asset.
delete_audio_isolation_history_item Destructive

Delete Audio Isolation History Item.
delete_auth_connection Destructive

Delete Workspace Auth Connection.
delete_batch_call Destructive

Delete A Batch Call.
delete_chapter_endpoint Destructive

Delete Chapter.
delete_chat_response_test_route Destructive

Delete Agent Response Test.
delete_conversation_route Destructive

Delete Conversation.
delete_conversation_tag_route Destructive

Delete Conversation Tag.
delete_dubbing Destructive

Delete Dubbing.
delete_finetune Destructive

Delete Music Finetune.
delete_invite Destructive

Delete Existing Invitation.
delete_knowledge_base_document Destructive

Delete Knowledge Base Document Or Folder.
delete_mcp_server_route Destructive

Delete Mcp Server.
delete_phone_number_route Destructive

Delete Phone Number.
delete_procedure_draft_route Destructive

Delete Procedure Draft.
delete_project Destructive

Delete Studio Project.
delete_pvc_voice_sample Destructive

Delete Pvc Voice Sample.
delete_rag_index Destructive

Delete Rag Index.
delete_sample Destructive

Delete Sample.
delete_secret_route Destructive

Delete Convai Workspace Secret.
delete_segment Destructive

Deletes A Single Segment. Deprecated upstream.
delete_service_account_api_key Destructive

Delete Service Account Api Key.
delete_speech_engine Destructive

Delete Speech Engine.
delete_speech_history_item Destructive

Delete History Item.
delete_tool_route Destructive

Delete Tool.
delete_transcript_by_id Destructive

Delete Transcript By Id.
delete_voice Destructive

Delete Voice.
delete_whatsapp_account Destructive

Delete Whatsapp Account.
delete_workspace_webhook_route Destructive

Delete Workspace Webhook.
dubbing_language_delete Destructive

Delete Dubbing Language Target.
dubbing_project_delete Destructive

Delete Dubbing Project.
dubbing_transcript_segment_delete Destructive

Delete Dubbing Transcript Segment.
public_remove_order_item Destructive

Remove Order Item.
remove_mcp_server_tool_approval_route Destructive

Delete Mcp Server Tool Approval.
remove_mcp_tool_config_override_route Destructive

Delete Mcp Tool Configuration Override.
remove_member Destructive

Delete Member From User Group.
remove_procedure_route Destructive

Remove Procedure.
remove_rules Destructive

Remove Rules From The Pronunciation Dictionary.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Elevenlabs

Tools at critical risk

Attacks that target this class

More on Elevenlabs

Enforce policy on every Elevenlabs tool call.