Critical-risk tools in GuildControl MCP
24 of the 258 tools in GuildControl MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_messagesDestructivePermanently delete only the exact messages in a matching reviewed plan after signed interactive confirmation, durable per-message coordination, one-shot reservation, pending con...
-
execute_bulk_guild_banDestructiveExecute one exact reviewed native Discord bulk guild ban after host write approval, signed interactive approval, a final fresh evidence match, durable coordination across every ...
-
execute_channel_deletionDestructivePermanently delete one exact reviewed direct Discord guild channel only after a fresh matching keyed plan, the identical recovery choice, and signed interactive approval of the ...
-
execute_direct_message_changeDestructiveExecute one exact reviewed private-message plain-text, static Components V2, or single owned-file send or reply, same-format text or Components V2 edit, or irreversible supporte...
-
execute_guild_application_command_changeDestructiveCreate, completely update, or irreversibly delete one exact guild application command after a fresh matching full-localization and permission-inventory plan, signed interactive ...
-
execute_guild_departureDestructiveRemove the connector bot from one exact Discord guild after a fresh matching complete membership plan, signed interactive approval, explicit access-loss, re-entry, and quiescenc...
-
execute_guild_integration_deletionDestructivePermanently delete one exact Discord guild integration after a fresh matching complete inventory plan, signed interactive approval, explicit webhook and bot consequence acknowle...
-
execute_guild_pruneDestructiveExecute one bounded non-exact Discord guild prune after host write approval, signed interactive approval, a final fresh matching count plan, durable guild-member and exact-role ...
-
execute_invite_deletionDestructivePermanently revoke one exact opaque Discord invite reference after a fresh matching plan, signed interactive approval, unique one-shot operation-key reservation, pending content...
-
execute_poll_endDestructiveIrreversibly end one exact bot-authored native Discord poll only after a fresh live-count-bound plan and signed interactive approval. A real change reserves a unique one-shot op...
-
execute_role_deletionDestructivePermanently delete one exact reviewed standard Discord role only after a fresh matching keyed plan, the identical recovery choice, and signed interactive approval of the credent...
-
execute_webhook_deletionDestructivePermanently delete one exact Discord Incoming webhook after a fresh matching plan, signed interactive approval, a unique one-shot operation-key reservation, pending content-free...
-
execute_webhook_message_deletionDestructivePermanently delete one exact privately credentialed Discord webhook message after a fresh matching content-bearing plan, signed interactive approval, durable webhook and message...
-
plan_channel_deletionDestructivePrepare a process-bound keyed plan to permanently delete one exact direct Discord guild channel. Requires an explicit irreversible content-loss acknowledgement plus one exact re...
-
plan_direct_message_changeDestructivePrepare a process-bound keyed plan for one exact private-message send, reply, same-format edit, or irreversible deletion involving one separately configured ordinary Discord use...
-
plan_guild_departureDestructivePrepare a process-bound keyed plan to remove the connector bot from one exact separately allowlisted Discord guild. Requires verified application and bot binding, exact guild an...
-
plan_guild_integration_deletionDestructivePrepare a process-bound keyed plan to permanently delete one exact separately allowlisted Discord guild integration. Requires a complete sub-limit privacy-safe inventory, comple...
-
plan_invite_deletionDestructivePrepare a process-bound keyed plan to revoke one exact opaque Discord invite reference in a separately allowlisted guild. Verifies application and bot identity, complete MANAGE_...
-
plan_message_deletionDestructivePrepare a process-bound keyed plan for one to 100 exact allowlisted Discord messages. Verifies application and bot identity, guild and channel ownership, optional thread members...
-
plan_poll_endDestructivePrepare a process-bound keyed plan to irreversibly end one exact bot-authored native Discord poll in a separately allowlisted channel. Verifies application and bot identity, exa...
-
plan_role_deletionDestructivePrepare a process-bound keyed plan to permanently delete one exact standard unmanaged Discord role. Requires an explicit irreversible role-loss acknowledgement plus one exact re...
-
plan_webhook_deletionDestructivePrepare a process-bound keyed plan to permanently delete one exact Incoming webhook in a separately allowlisted direct guild channel. Verifies application and bot identity, the ...
-
plan_webhook_message_deletionDestructivePrepare a process-bound keyed plan to permanently delete one exact message authored by one privately managed Incoming webhook. Verifies credential-to-webhook identity, direct sc...
-
plan_application_entitlement_consumptionFinancialPrepare a process-bound keyed plan to irreversibly consume one exact current Discord consumable entitlement for a separately allowlisted user and current-application consumable ...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.