Critical-risk tools in MCP Framework Personal

Critical severity MCP Framework Personal MCP Server 22 of 643 tools

22 of the 643 tools in MCP Framework Personal are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

agent_cancel Destructive

Cancela un job por ID.
agent_delete_task Destructive

Elimina una tarea por ID.
clear_routing_history Destructive

Borra todo el historial de ruteo. Sin parametros.
consumer_group_delete Destructive

Elimina un consumer group del cluster. Parametros: group_id (requerido).
consumer_group_reset_offsets Destructive

Resetea offsets de un consumer group. Parametros: group_id, topic, partition (default -1 = todas), offset (
delete_topic Destructive

Elimina un topic Kafka. Parametros: topic (requerido).
drop_columns Destructive

drop_columns
drop_duplicates Destructive

drop_duplicates
drop_nulls Destructive

drop_nulls
filesystem_delete Destructive

filesystem_delete
git_branch_delete Destructive

Elimina una rama local. Parametros: branch_name (requerido).
git_reset Destructive

Quita archivos del stage (unstage). Si no se proveen files, quita todos.
git_stash_drop Destructive

Elimina un stash. Parametros: index (int, default 0).
git_tag_delete Destructive

Elimina un tag. Parametros: name (requerido).
image_remove Destructive

Elimina una imagen Docker local. Parametros: image_id (ID o nombre), force (bool).
network_remove Destructive

Elimina una red Docker. Parametros: network_id (ID o nombre).
personal_clear_category Destructive

Delete all entries in a category.
personal_delete Destructive

Delete one personal fact when local writes are enabled.
sonar_project_delete Destructive

Elimina un proyecto en SonarQube.
storage_delete_object Destructive

storage_delete_object
tf_destroy Destructive

Ejecuta terraform destroy.
volume_remove Destructive

Elimina un volumen Docker. Parametros: volume_name (nombre), force (bool).

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in MCP Framework Personal

Tools at critical risk

Attacks that target this class

More on MCP Framework Personal

Enforce policy on every MCP Framework Personal tool call.