Critical-risk tools in Adaptercloud
48 of the 396 tools in Adaptercloud are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
adaptercloud_auth_logoutDestructiveLog out and clear all stored authentication tokens.
-
adaptercloud_billing_payment_methods_removeDestructiveDelete a payment method by ID.
-
adaptercloud_billing_subscriptions_cancelDestructiveCancel a subscription with an optional reason.
-
adaptercloud_channels_connections_deleteDestructiveDelete a channel connection by ID.
-
adaptercloud_channels_deleteDestructiveDelete a channel by ID.
-
adaptercloud_conversations_deleteDestructiveDelete a conversation by ID.
-
adaptercloud_conversations_drafts_deleteDestructiveDelete the current actor’s draft for a conversation.
-
adaptercloud_conversations_messages_deleteDestructiveSoft-delete (default) or hard-delete a message.
-
adaptercloud_conversations_messages_unpinDestructiveRemove a pinned message from its conversation.
-
adaptercloud_conversations_participants_removeDestructiveRemove a user from a conversation.
-
adaptercloud_conversations_reactions_removeDestructiveRemove the current actor’s emoji reaction from a message.
-
adaptercloud_devportal_api_keys_revokeDestructiveRevoke an API key by ID. Revocation is irreversible. Returns `{ status, message, apiKeyId }`.
-
adaptercloud_devportal_apps_deleteDestructiveDelete a devportal application.
-
adaptercloud_devportal_apps_webhooks_removeDestructiveRemove a webhook by ID.
-
adaptercloud_devportal_delegations_revokeDestructiveRevoke a workspace delegation by ID. Returns `{ status, message, delegationId }`.
-
adaptercloud_devportal_oauth_deleteDestructiveDelete an OAuth 2.0 client by ID. Returns `{ status, message, oauthClientId }`.
-
adaptercloud_devportal_orgs_deleteDestructiveDelete a publisher organization.
-
adaptercloud_files_revokeDestructiveRevoke an existing file share by ID (mirrors SDK files.shareApi.revoke). Returns the updated share record with revokedAt/revokedBy set.
-
adaptercloud_files_share_revokeDestructiveRevoke a previously created file share by ID.
-
adaptercloud_groups_deleteDestructiveDelete a group. Use archive=true for a soft delete (status change only).
-
adaptercloud_groups_members_removeDestructiveRemove one or more members from a group by membership ID.
-
adaptercloud_integrations_connections_deleteDestructiveDelete a connection. Use keepSecret=true to retain the vault secret.
-
adaptercloud_integrations_connections_revokeDestructiveRevoke a connection — invalidates tokens and marks as REVOKED.
-
adaptercloud_integrations_tags_removeDestructiveRemove a tag assignment from a connection.
-
adaptercloud_organizations_members_removeDestructiveRemove a user from an organization. Returns { removed: boolean, organizationId, userId }.
-
adaptercloud_products_content_pages_deleteDestructiveDelete a content page.
-
adaptercloud_products_deleteDestructiveDelete a platform product.
-
adaptercloud_products_feature_flags_deleteDestructiveDelete a feature flag.
-
adaptercloud_products_shortcuts_deleteDestructiveDelete a keyboard shortcut.
-
adaptercloud_rbac_roles_deleteDestructiveDelete a role, optionally reassigning actors to another role.
-
adaptercloud_sandbox_admin_activityDestructiveGet recent sandbox lifecycle activity (create/stop/delete/extend).
-
adaptercloud_sandbox_deleteDestructiveDelete a sandbox and its Kubernetes resources.
-
adaptercloud_sandbox_templates_deleteDestructiveDelete a sandbox template configuration.
-
adaptercloud_scheduler_jobs_deleteDestructiveDelete a scheduled job.
-
adaptercloud_scheduler_tags_removeDestructiveRemove a tag assignment from a scheduled job.
-
adaptercloud_scheduler_templates_deleteDestructiveDelete a schedule template.
-
adaptercloud_security_secrets_deleteDestructiveDelete a secret by ID.
-
adaptercloud_security_vaults_deleteDestructiveDelete a vault. Set archive=true to soft-archive instead of permanently deleting.
-
adaptercloud_store_cart_clearDestructiveRemove every item from the current user's active cart. Returns the resulting empty cart payload.
-
adaptercloud_store_cart_removeDestructiveRemove an item from the cart.
-
adaptercloud_store_installed_uninstallDestructiveUninstall a product by installation ID.
-
adaptercloud_sync_cancelDestructiveCancel an in-flight or queued sync run. Returns the updated sync run.
-
adaptercloud_tags_deleteDestructivePermanently delete a tag and all its assignments. This is destructive — there is no soft-delete on the tags service.
-
adaptercloud_tags_permissions_revokeDestructiveDelete a tag relation by its relation ID.
-
adaptercloud_tours_progress_resetDestructiveReset tour progress for the given user (defaults to the current actor).
-
adaptercloud_workspace_deleteDestructiveDelete a workspace (workspace layer).
-
adaptercloud_workspace_members_removeDestructiveRemove a member by membership id.
-
adaptercloud_billing_credits_withdrawFinancialRequest a credit withdrawal to a payout account.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.