Critical-risk tools in ArvanCloud MCP Server
33 of the 232 tools in ArvanCloud MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
arvan_delete_cdn_appDestructiveDelete a CDN app by id.
-
arvan_delete_dns_recordDestructiveDelete a DNS record by id.
-
arvan_delete_domainDestructiveRemove a domain from the CDN.
-
arvan_delete_firewall_ruleDestructiveDelete a firewall (WAF) rule by id.
-
arvan_delete_floating_ipDestructiveRelease (delete) a floating IP address by id.
-
arvan_delete_log_forwarderDestructiveDelete a log forwarder by id.
-
arvan_delete_page_ruleDestructiveDelete a page rule by id.
-
arvan_delete_ptr_recordDestructiveDelete a reverse-DNS (PTR) record by id.
-
arvan_delete_rate_limit_ruleDestructiveDelete a rate-limit rule by id.
-
arvan_delete_security_groupDestructiveDelete a security group by id.
-
arvan_delete_security_ruleDestructiveDelete a security-group rule by id.
-
arvan_delete_serverDestructiveDelete a cloud server. Set force_delete_floating_ips to also release IPs.
-
arvan_delete_ssh_keyDestructiveDelete a registered SSH key by name.
-
arvan_delete_subnetDestructiveDelete a private-network subnet by id.
-
arvan_delete_tagDestructiveDelete a resource tag by id.
-
arvan_delete_volumeDestructiveDelete a block-storage volume by id.
-
arvan_helm_uninstallDestructiveUninstall a Helm release.
-
arvan_iac_terraform_destroyDestructiveRun ``terraform destroy`` (tears down infrastructure; needs auto_approve).
-
arvan_k8s_deleteDestructive``kubectl delete -f`` a manifest or directory.
-
arvan_live_delete_channelDestructiveDelete a live channel by id.
-
arvan_purge_cacheDestructivePurge cached content for a domain.
-
arvan_rebuild_serverDestructiveRebuild a server from an image (destroys current root disk contents).
-
arvan_s3_delete_bucketDestructiveDelete an (empty) bucket.
-
arvan_s3_delete_objectDestructiveDelete a single object.
-
arvan_s3_delete_objectsDestructiveDelete multiple objects in one call.
-
arvan_task_cancelDestructiveCancel a scheduled/running background task.
-
arvan_vod_delete_audioDestructiveDelete an audio item by id.
-
arvan_vod_delete_channelDestructiveDelete a VOD channel by id.
-
arvan_vod_delete_fileDestructiveDelete an uploaded source file by id.
-
arvan_vod_delete_profileDestructiveDelete an encoding profile by id.
-
arvan_vod_delete_subtitleDestructiveDelete a subtitle by id.
-
arvan_vod_delete_videoDestructiveDelete a VOD video by id.
-
arvan_vod_delete_watermarkDestructiveDelete a watermark by id.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.