Critical-risk tools in Mux
12 of the 98 tools in Mux are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_video_uploadsDestructive 4/5Cancels a direct upload and marks it as cancelled. If a pending upload finishes after this request, no asset will be created. This request will only succeed if the upload is sti...
-
delete_data_annotationsDestructive 4/5Deletes an annotation.
-
delete_new_asset_settings_static_renditions_video_live_streamsDestructive 4/5Deletes a live stream's static renditions settings for new assets. Further assets made via this live stream will not create static renditions unless re-added.
-
delete_playback_id_video_assetsDestructive 5/5Deletes a playback ID, rendering it nonfunctional for viewing an asset's video content. Please note that deleting the playback ID removes access to the underlying asset; a viewe...
-
delete_playback_id_video_live_streamsDestructive 4/5Deletes the playback ID for the live stream. This will not disable ingest (as the live stream still exists). New attempts to play back the live stream will fail immediately. How...
-
delete_simulcast_target_video_live_streamsDestructive 4/5Delete the simulcast target using the simulcast target ID returned when creating the simulcast target. Simulcast Target can only be deleted when the parent live stream is in idl...
-
delete_static_rendition_video_assetsDestructive 4/5Deletes a single static rendition for an asset
-
delete_system_signing_keysDestructive 4/5Deletes an existing signing key. Use with caution, as this will invalidate any existing signatures and no JWTs can be signed using the key again.
-
delete_track_video_assetsDestructive 4/5Removes a text or additional audio track from an asset. Neither video nor the primary audio track can be removed.
-
delete_video_playback_restrictionsDestructive 4/5Deletes a single Playback Restriction.
-
delete_video_transcription_vocabulariesDestructive 4/5Deletes a Transcription Vocabulary. The Transcription Vocabulary's ID will be disassociated from any live streams using it. Transcription Vocabularies can be deleted while assoc...
-
reset_stream_key_video_live_streamsDestructive 4/5Reset a live stream key if you want to immediately stop the current stream key from working and create a new stream key that can be used for future broadcasts.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on Mux
Enforce policy on Mux
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init