Critical-risk tools in Mcp Mautic
33 of the 229 tools in Mcp Mautic are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
mautic_batch_delete_contactsDestructiveDelete multiple contacts in a single request
-
mautic_campaign_force_reentryDestructiveForce a contact to re-enter a campaign by removing them and immediately re-adding them. Useful for re-triggering nurture sequences, onboarding flows, or retry logic. This is a c...
-
mautic_contact_gdpr_eraseDestructiveGDPR right-to-erasure: blank all personal data fields on a contact while keeping the contact record for audit trail. Uses overwriteWithBlank to actually clear field values. Blan...
-
mautic_delete_assetDestructiveDelete an asset and its file reference
-
mautic_delete_campaignDestructiveDelete campaign
-
mautic_delete_categoryDestructiveDelete category
-
mautic_delete_companyDestructiveDelete company
-
mautic_delete_company_fieldDestructiveDelete a custom company field. WARNING: Permanently removes the field and data.
-
mautic_delete_contactDestructiveDelete a Mautic contact
-
mautic_delete_contact_fieldDestructiveDelete a custom contact field. WARNING: This permanently removes the field and all stored data for it across all contacts.
-
mautic_delete_dynamic_contentDestructiveDelete dynamic content
-
mautic_delete_emailDestructiveDelete email
-
mautic_delete_fileDestructiveDelete a file from Mautic
-
mautic_delete_focusDestructiveDelete focus item
-
mautic_delete_formDestructiveDelete a Mautic form
-
mautic_delete_form_actionDestructiveDelete a specific action from a form.
-
mautic_delete_form_fieldDestructiveDelete a specific field from a form.
-
mautic_delete_messageDestructiveDelete a marketing message
-
mautic_delete_noteDestructiveDelete a Mautic note
-
mautic_delete_notificationDestructiveDelete a web push notification
-
mautic_delete_pageDestructiveDelete a Mautic page
-
mautic_delete_point_actionDestructiveDelete a point action
-
mautic_delete_point_groupDestructiveDelete a point group (Mautic 5+)
-
mautic_delete_point_triggerDestructiveDelete a point trigger
-
mautic_delete_roleDestructiveDelete a user role
-
mautic_delete_segmentDestructiveDelete a Mautic segment
-
mautic_delete_smsDestructiveDelete an SMS/text message
-
mautic_delete_stageDestructiveDelete stage
-
mautic_delete_tagDestructiveDelete a Mautic tag
-
mautic_delete_userDestructiveDelete a Mautic user
-
mautic_delete_webhookDestructiveDelete webhook
-
mautic_merge_contactsDestructiveMerge two contacts into one. Fetches both contacts, merges their data (target wins on conflicts, fills empty target fields from source), updates the target, and deletes the sour...
-
mautic_remove_contact_utmDestructiveRemove a specific set of UTM tags from a contact
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.