Critical-risk tools in Binalyze AIR MCP Server

Critical severity Binalyze AIR MCP Server MCP Server 17 of 116 tools

17 of the 116 tools in Binalyze AIR MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_task_assignment Destructive 4/5

Cancel a task assignment by its ID
cancel_task_by_id Destructive 4/5

Cancel a specific task by its ID
delete_auto_asset_tag_by_id Destructive 4/5

Delete a specific auto asset tag rule by its ID
delete_note_from_case Destructive 4/5

Delete a note from a case by its ID
delete_organization Destructive 4/5

Delete an organization by its ID
delete_policy_by_id Destructive 4/5

Delete a specific policy by its ID
delete_repository Destructive 4/5

Delete an evidence repository by its ID
delete_tags_from_organization Destructive 4/5

Delete specific tags from an organization
delete_task_assignment Destructive 4/5

Delete a specific task assignment by its ID
delete_task_by_id Destructive 4/5

Delete a specific task by its ID
delete_triage_rule Destructive 4/5

Delete an existing triage rule by ID
purge_and_uninstall_assets Destructive 4/5

Purge data and uninstall specific assets based on filters. Requires specifying `filter.includedEndpointIds`.
remove_endpoints_from_case Destructive 4/5

Remove endpoints from a case based on specified filters
remove_tags_from_assets Destructive 4/5

Remove tags from specific assets based on filters. Requires specifying `filter.includedEndpointIds` and `tags`.
remove_task_assignment_from_case Destructive 4/5

Remove a specific task assignment from a case
remove_user_from_organization Destructive 4/5

Remove a user from an organization
uninstall_assets Destructive 4/5

Uninstall specific assets based on filters without purging data. Requires specifying `filter.includedEndpointIds`.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Binalyze AIR MCP Server

Tools at critical risk

Attacks that target this class

More on Binalyze AIR MCP Server

Enforce policy on Binalyze AIR MCP Server