Critical-risk tools in Gluecron

Critical severity Gluecron MCP Server 2 of 60 tools

2 of the 60 tools in Gluecron are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

gluecron_delete_file Destructive

Delete a file from a branch via git plumbing. Requires the existing blob sha (optimistic concurrency) and 'repo' scope. Mirrors DELETE /api/v2/contents.
gluecron_delete_repo Destructive

Permanently delete a repository row (git data on disk is left untouched). Owner-only. Requires 'admin' scope. Returns {deleted: true}.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Gluecron

Tools at critical risk

Attacks that target this class

More on Gluecron

Enforce policy on every Gluecron tool call.