Critical-risk tools in Enhanced Knowledge Graph Memory Server
22 of the 225 tools in Enhanced Knowledge Graph Memory Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
adaptive_reduce_memoriesDestructiveAdaptively reduce a set of memories until their cognitive load falls below the configured threshold by removing low-salience redundant memories
-
cache_clearDestructivev12.5.0 \u2014 Bust all four global search caches. Idempotent; safe after manual graph edits to drop stale results.
-
clear_expired_memoriesDestructiveRemove all working memories that have exceeded their TTL. Complements get_expired_entities (which lists but does not delete).
-
clear_heuristicsDestructivev2.1.0 \u2014 Drop every heuristic (across all entities of type
-
clear_project_contextDestructivev2.1.0 \u2014 Wipe the four arrays (facts/conventions/commands/glossary) for projectId; keeps the entity.
-
delete_entitiesDestructiveDelete multiple entities from the knowledge graph
-
delete_observationsDestructiveDelete specific observations from entities
-
delete_relationsDestructiveDelete multiple relations from the knowledge graph
-
delete_saved_searchDestructiveDelete a saved search
-
deregister_refDestructiveRemove a stable alias (ref) from the RefIndex
-
forget_memoryDestructiveForget (delete) observations matching the given content. Tries exact match first; falls back to semantic search at 0.85 similarity threshold if available. Supports dryRun to pre...
-
forget_weak_memoriesDestructiveBulk-delete memories that fell below a decay threshold. Unlike forget_memory (content match) or archive_entities (criteria-based move), this uses decay-based importance scoring.
-
invalidate_entityDestructive\u03B7.4.4 \u2014 Mark an entity as no longer valid by setting validUntil. Idempotent. Does not delete the entity \u2014 entity_as_of still returns it for past asOf timestamps. ...
-
rbac_revoke_roleDestructive\u03B7.6.1 \u2014 Remove a specific role assignment. Matching is by agentId + role + resourceType (exact, including undefined).
-
remove_exclusion_ruleDestructivev2.1.0 \u2014 Drop an exclusion rule by id. Does NOT restore previously deleted memories \u2014 the contract is
-
remove_heuristicDestructivev2.1.0 \u2014 Drop a heuristic by id.
-
remove_project_commandDestructivev2.1.0 \u2014 Remove a command by name. Returns true if found.
-
remove_project_conventionDestructivev2.1.0 \u2014 Remove a single convention. Returns true if found.
-
remove_project_factDestructivev2.1.0 \u2014 Remove a single fact. Returns true if found.
-
remove_project_glossary_termDestructivev2.1.0 \u2014 Remove a glossary entry by term. Returns true if found.
-
remove_tag_aliasDestructiveRemove a tag alias
-
remove_tool_affordanceDestructivev2.1.0 \u2014 Drop a tool-affordance record by toolName.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.