Critical-risk tools in 20i MCP Server

Critical severity 20i MCP Server MCP Server 34 of 302 tools

34 of the 302 tools in 20i MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

deactivate_package Destructive

Deactivate a hosting package to suspend services
deactivate_vps Destructive

Deactivate VPS service
delete_application Destructive

Delete a deployed runtime application
delete_cdn_security_headers Destructive

Delete CDN security headers
delete_easy_builder_instance Destructive

Delete an Easy Builder instance
delete_hosting_package Destructive

Delete a hosting package
delete_mssql_database Destructive

Delete MSSQL database (DESTRUCTIVE)
delete_package Destructive

Delete hosting package and optionally remove files
manage_directories Destructive

Create or delete directories in a hosting package
manage_wordpress_plugin Destructive

Activate, deactivate, or remove WordPress plugin
purge_cdn_cache Destructive

Purge CDN cache by URL
rebuild_vps Destructive

Rebuild VPS with new configuration (DESTRUCTIVE)
reinstall_software Destructive

Reinstall platform software (e.g., WordPress)
reinstall_wordpress Destructive

Reinstall WordPress on a hosting package
remove_country_block Destructive

Remove a country from the block list
remove_ip_block Destructive

Remove an IP address from the block list
remove_mssql_user Destructive

Remove user from MSSQL database
remove_ssl_certificates Destructive

Remove SSL certificates from a hosting package
remove_stack_user_from_package Destructive

Remove a Stack user from a hosting package
remove_subdomain Destructive

Remove a subdomain from a hosting package
reset_managed_vps_profile Destructive

Reset managed VPS profile to default
restore_ftp_backup Destructive

Restore backup file uploaded via FTP
restore_snapshot Destructive

Restore from timeline snapshot with precise control
shutdown_vps Destructive

Shutdown VPS instance
suspend_package Destructive

Suspend a hosting package
add_tls_certificate Financial

Order a premium TLS/SSL certificate
order_mssql_database Financial

Order MSSQL database allowance for reseller account
order_premium_mailbox Financial

Order a premium mailbox service
order_ssl_certificate Financial

Order a new SSL certificate from 20i
order_vps Financial

Order new VPS instance
order_website_turbo_credits Financial

Order Website Turbo credits
renew_mssql_database Financial

Renew MSSQL database subscription
renew_premium_mailbox Financial

Renew a premium mailbox subscription
renew_vps Financial

Renew VPS subscription

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in 20i MCP Server

Tools at critical risk

Attacks that target this class

More on 20i MCP Server

Enforce policy on every 20i MCP Server tool call.