Critical-risk tools in Executor Mcp Roblox
14 of the 291 tools in Executor Mcp Roblox are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
clear-queue-on-teleportDestructiveWRITES EXECUTOR STATE — clears any code previously queued with queueonteleport, via
-
clear-remote-spy-logsDestructiveWRITES LIVE GAME STATE. Clears the selected engine
-
clear-selectionDestructiveDrop THIS session
-
clear-semantic-indexDestructiveDrop the cached semantic index for THIS session
-
delete-fileDestructiveDelete a single file from the executor
-
delete-folderDestructiveDelete a folder (and typically its contents) from the executor
-
destroy-instanceDestructiveWRITES LIVE GAME STATE. Resolve a Luau expression to an Instance and permanently remove it from the game via
-
draw-clearDestructiveTears down the entire MCP-managed Drawing overlay: iterates every handle stored in getgenv().__mcp_drawings,
-
draw-removeDestructiveDestroys one Drawing overlay created by draw-create: looks the handle up by its integer id in
-
playbook-deleteDestructiveRemove a persisted playbook from ~/.executor-mcp/playbooks/. Returns { ok: true, removed: true } when
-
release-closure-referenceDestructiveWRITES LIVE GAME STATE. Remove one key from getgenv().__mcp_closure_refs so cloned/wrapped closures can be
-
remote-spyDestructiveWRITES LIVE GAME STATE. Controls the selected spy: lifecycle, configure, pause/resume, clear, block/unblock, ignore/unignore, and reset-controls. Select engine=cobalt (default) ...
-
teach-modeDestructiveEvent-driven demonstration recorder with start, poll, stop, and cancel actions. It uses bounded client-side
-
vm-resetDestructiveWipe the persistent VM environment used by the
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.