Critical-risk tools in Deloc
8 of the 45 tools in Deloc are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_actionDestructivePermanently delete an Action. All secrets and invocation logs are cascaded. Irreversible.
-
delete_action_secretDestructiveDelete a secret from an Action. Any template referencing ${NAME} will fail at invoke time with variable_missing until re-set.
-
delete_appDestructivePermanently delete a published app and its files
-
delete_dashboard_queryDestructiveDelete a scheduled dashboard query. The already-written {name}.json data file stays in the app; it just stops refreshing.
-
delete_data_connectionDestructiveDelete a data connection. Fails if any dashboard query still uses it — repoint or delete those queries first.
-
delete_oauth_credentialDestructivePermanently delete an OAuth credential. Fails with a list of referencing actions if any still use it — reassign or remove those actions first.
-
disable_appDestructiveTake a published app offline
-
logoutDestructiveLog out of Deloc and clear stored credentials. Use this to switch to a different account.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.