Critical-risk tools in Ghl

Critical severity Ghl MCP Server 86 of 569 tools

86 of the 569 tools in Ghl are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

ad_manager_fb_delete_ad Destructive

Delete ad
ad_manager_fb_delete_ad_account Destructive

Delete ad account
ad_manager_fb_delete_adset Destructive

Delete ad set
ad_manager_fb_delete_campaign Destructive

Delete campaign
ad_manager_fb_delete_custom_audience Destructive

Delete custom audience
ad_manager_fb_delete_integration Destructive

Delete Facebook integration
ad_manager_fb_delete_page Destructive

Delete page connection
ad_manager_fb_remove_custom_audience_member Destructive

Remove custom audience member
ad_manager_google_delete_ad_account Destructive

Delete ad account
ad_manager_google_delete_conversion Destructive

Delete conversion
ad_manager_google_delete_segment Destructive

Delete segment
ad_manager_li_delete_ad_account Destructive

Delete ad account
agent_studio_delete_agent Destructive

Delete Agent
associations_delete_association Destructive

Delete Association
associations_delete_relation Destructive

Delete Relation
brand_boards_delete_brand_board Destructive

Delete a Brand Board
businesses_delete_business Destructive

Delete Business
calendars_delete_appointment_note Destructive

Delete Note
calendars_delete_calendar Destructive

Delete Calendar
calendars_delete_calendar_resource Destructive

Delete Calendar Resource
calendars_delete_event Destructive

Delete Event
calendars_delete_event_notification Destructive

Delete Notification
calendars_delete_group Destructive

Delete Group
calendars_delete_schedule Destructive

Delete user availability schedule
calendars_remove_calendar_from_schedule Destructive

Remove user availability schedule from a calendar
contacts_delete_contact Destructive

Delete Contact
contacts_delete_contact_from_workflow Destructive

Delete Contact from Workflow
contacts_delete_note Destructive

Delete Note
contacts_delete_task Destructive

Delete Task
contacts_remove_contact_from_campaign Destructive

Remove Contact From Campaign
contacts_remove_contact_from_every_campaign Destructive

Remove Contact From Every Campaign
contacts_remove_followers_contact Destructive

Remove Followers
contacts_remove_tags Destructive

Remove Tags
conversation_ai_delete_action Destructive

Remove Action from Agent
conversation_ai_delete_agent Destructive

Delete Agent
conversations_cancel_scheduled_email_message Destructive

Cancel a scheduled email message.
conversations_cancel_scheduled_message Destructive

Cancel a scheduled message.
conversations_delete_conversation Destructive

Delete Conversation
custom_fields_delete_custom_field Destructive

Delete Custom Field By Id
custom_fields_delete_custom_field_folder Destructive

Delete Custom Field Folder
custom_menus_delete_custom_menu Destructive

Delete Custom Menu Link (requires an agency-level token, not a location PIT)
emails_delete_template Destructive

Delete a template
funnels_delete_redirect_by_id Destructive

Delete Redirect By Id
invoices_cancel_invoice_schedule Destructive

Cancel an scheduled invoice
invoices_delete_estimate Destructive

Delete Estimate
invoices_delete_estimate_template Destructive

Delete Estimate Template
invoices_delete_invoice Destructive

Delete invoice
invoices_delete_invoice_schedule Destructive

Delete schedule
invoices_delete_invoice_template Destructive

Delete template
knowledge_base_delete Destructive

Delete an existing knowledge base FAQ
knowledge_base_delete_knowledge_base Destructive

Delete a knowledge base
knowledge_base_delete_trained_urls_for_knowledge_base Destructive

Delete trained pages
links_delete_link Destructive

Delete Link
locations_delete_an_email_sms_template Destructive

DELETE an email/sms template
locations_delete_custom_field Destructive

Delete Custom Field
locations_delete_custom_value Destructive

Delete Custom Value
locations_delete_location Destructive

Delete Sub-Account (Formerly Location) (requires an agency-level token, not a location PIT)
locations_delete_recurring_task Destructive

Delete Recurring Task
locations_delete_tag Destructive

Delete tag
marketplace_uninstall_application Destructive

Uninstall an application
medias_bulk_delete_media_objects Destructive

Bulk Delete / Trash Files or Folders
medias_delete_media_content Destructive

Delete File or Folder
objects_delete_object_record Destructive

Delete Record
opportunities_delete_opportunity Destructive

Delete Opportunity
opportunities_remove_followers_opportunity Destructive

Remove Followers
payments_delete_coupon Destructive

Delete Coupon
payments_delete_integration Destructive

Deleting an existing integration
products_delete_price_by_id_for_product Destructive

Delete Price by ID for a Product
products_delete_product_by_id Destructive

Delete Product by ID
products_delete_product_collection Destructive

Delete Product Collection
products_delete_product_review Destructive

Delete Product Review
social_media_posting_bulk_delete_social_planner_posts Destructive

Bulk Delete Social Planner Posts
social_media_posting_delete_account Destructive

Delete Account
social_media_posting_delete_csv Destructive

Delete CSV
social_media_posting_delete_csv_post Destructive

Delete CSV Post
social_media_posting_delete_post Destructive

Delete Post
store_delete_shipping_carrier Destructive

Delete shipping carrier
store_delete_shipping_rate Destructive

Delete shipping rate
store_delete_shipping_zone Destructive

Delete shipping zone
users_delete_user Destructive

Delete User
voice_ai_delete_action Destructive

Delete Agent Action
voice_ai_delete_agent Destructive

Delete Agent
invoices_send_invoice Financial

Send invoice
marketplace_charge Financial

Create a new wallet charge
marketplace_delete_charge Financial

Delete a wallet charge
social_media_posting_start_csv_finalize Financial

Start CSV Finalize

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Ghl

Tools at critical risk

Attacks that target this class

More on Ghl

Enforce policy on every Ghl tool call.