Critical-risk tools in AirMCP
18 of the 279 tools in AirMCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
close_tabDestructiveClose a specific Safari tab. Use list_tabs to find window/tab indices.
-
delete_contactDestructiveDelete a contact by ID. This action is permanent.
-
delete_eventDestructiveDelete a calendar event by ID. This action is permanent.
-
delete_noteDestructiveDelete a note by ID. The note is moved to Recently Deleted and permanently removed after 30 days.
-
delete_photosDestructiveDelete photos by local identifier. Shows macOS confirmation dialog for user approval. Requires macOS 26+ Swift bridge.
-
delete_playlistDestructiveDelete an existing playlist from Music.
-
delete_reminderDestructiveDelete a reminder by ID. This action is permanent.
-
delete_reminder_listDestructiveDelete a reminder list by name. This action is permanent and removes all reminders in the list.
-
delete_shortcutDestructiveDelete a Siri Shortcut by name. Uses the macOS shortcuts CLI (macOS 13+). This action is permanent and cannot be undone.
-
memory_forgetDestructiveDelete context-memory entries. Provide exactly one selector:
-
move_noteDestructiveMove a note to a different folder. NOTE: Apple Notes has no native move command, so this copies the note body to the target folder and deletes the original. The note will get a ...
-
quit_appDestructiveQuit a running application by name. May cause unsaved work to be lost.
-
remove_from_playlistDestructiveRemove a track from a playlist.
-
semantic_clearDestructiveDelete all indexed data from the local vector store AND remove corresponding entries from macOS Spotlight.
-
semantic_indexDestructiveBuild the local vector index over enabled Apple apps for semantic search — replaces any existing index; embeddings need GEMINI_API_KEY or the Swift bridge.
-
spotlight_clearDestructiveRemove all AirMCP entries from macOS Spotlight without clearing the local vector store. Requires Swift bridge.
-
system_powerDestructiveShutdown or restart the Mac. Use with caution.
-
trash_fileDestructiveMove a file or folder to the Trash using Finder.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.