Critical-risk tools in Frontmcp

Critical severity Frontmcp MCP Server 11 of 206 tools

11 of the 206 tools in Frontmcp are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

clear-audit-log Destructive

Clear all audit log entries
clear-replay-buffer Destructive

Clear the replay buffer for a channel
clear-session-notifications Destructive

Clear captured notifications for a session
crm-reset Destructive

Reset CRM store to initial seed data (for testing)
delete-vault-entry Destructive

Delete an authorization vault entry
notes-reset Destructive

Clear all notes from the store (for testing)
remove_job Destructive

Remove a dynamic job by name.
remove_workflow Destructive

Remove a dynamic workflow by name.
reset-stats Destructive

Reset execution statistics for fresh testing
secret Destructive

Set/get/list/delete a session secret via this.secureStore
users-delete Destructive

Delete a user from the CRM

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Frontmcp

Tools at critical risk

Attacks that target this class

More on Frontmcp

Enforce policy on every Frontmcp tool call.