Critical-risk tools in Pipedrive MCP Server

Critical severity Pipedrive MCP Server MCP Server 31 of 155 tools

31 of the 155 tools in Pipedrive MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

pipedrive_convert_deal_to_lead Destructive

Convert a deal to a lead (async job). DESTRUCTIVE: a successful conversion marks the source deal as deleted. Returns a conversion_id; the conversion runs asynchronously, so you ...
pipedrive_delete_activity Destructive

Delete an activity.
pipedrive_delete_board Destructive

Delete a project board. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true). (Projects add-on; Projects API in public beta.)
pipedrive_delete_deal Destructive

Delete a deal. The deal will be marked as deleted and permanently removed after 30 days.
pipedrive_delete_deal_discount Destructive

Delete an additional discount from a deal.
pipedrive_delete_deal_field Destructive

Delete a deal custom field by field_code. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_deal_field_options Destructive

Bulk-delete options of a deal enum/set field. Atomic: fails if any ID does not exist. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_deal_follower Destructive

Remove a follower from a deal.
pipedrive_delete_deal_installment Destructive

Delete an installment from a deal. Growth+ plan required.
pipedrive_delete_deal_product Destructive

Remove a line-item product from a deal.
pipedrive_delete_lead Destructive

Delete a lead. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_note Destructive

Delete a note.
pipedrive_delete_organization Destructive

Delete an organization. The organization will be marked as deleted and permanently removed after 30 days.
pipedrive_delete_organization_field Destructive

Delete an organization custom field by field_code. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_organization_field_options Destructive

Bulk-delete options of an organization enum/set field. Atomic: fails if any ID does not exist. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_organization_follower Destructive

Remove a follower from an organization.
pipedrive_delete_person Destructive

Delete a person. The person will be marked as deleted and permanently removed after 30 days.
pipedrive_delete_person_field Destructive

Delete a person custom field by field_code. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_person_field_options Destructive

Bulk-delete options of a person enum/set field. Atomic: fails if any ID does not exist. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_person_follower Destructive

Remove a follower from a person.
pipedrive_delete_phase Destructive

Delete a project phase. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true). (Projects add-on; Projects API in public beta.)
pipedrive_delete_pipeline Destructive

Delete a pipeline. Marks the pipeline as deleted. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_product Destructive

Delete a product. The product will be marked as deleted and permanently removed after 30 days.
pipedrive_delete_product_field Destructive

Delete a product custom field by field_code. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_product_field_options Destructive

Bulk-delete options of a product enum/set field. Atomic: fails if any ID does not exist. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_product_follower Destructive

Remove a follower from a product.
pipedrive_delete_product_image Destructive

Delete the image of a product.
pipedrive_delete_product_variation Destructive

Delete a product variation.
pipedrive_delete_project Destructive

Delete a project. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true). (Requires the Projects add-on; Projects API is in public beta.)
pipedrive_delete_stage Destructive

Delete a stage. Marks the stage as deleted. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true).
pipedrive_delete_task Destructive

Delete a task. If the task has subtasks, those will also be deleted. Requires PIPEDRIVE_MODE=full (back-compat: PIPEDRIVE_ENABLE_DESTRUCTIVE=true). (Projects add-on; Projects AP...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Pipedrive MCP Server

Tools at critical risk

Attacks that target this class

More on Pipedrive MCP Server

Enforce policy on every Pipedrive MCP Server tool call.