Critical-risk tools in Agentled
15 of the 119 tools in Agentled are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_agentDestructivePermanently delete an agent and all its files. Also deletes the linked proactive agent.
-
delete_agent_fileDestructivePermanently delete a file attached to an agent.
-
delete_knowledge_listDestructivePermanently delete a knowledge list and ALL its rows. This action is irreversible. Pass the listKey of the list to delete. The API requires confirm: true — this tool sends it au...
-
delete_knowledge_rowsDestructiveDelete specific rows from a knowledge list by their IDs. This action is irreversible. For more than 10 rows the API requires confirm: true — this tool sends it automatically. Re...
-
delete_knowledge_textDestructiveDelete a text-based knowledge entry by key. This action is irreversible. Returns: { success, key }.
-
delete_memoryDestructiveDelete a specific memory by key.
-
delete_proactive_agentDestructivePermanently delete a proactive agent.
-
delete_public_form_linkDestructiveDelete a public form link by token/id. Currently unsupported by External API (returns 501).
-
delete_routineDestructivePermanently delete a routine. This cannot be undone.
-
delete_snapshotDestructiveDelete a specific config snapshot. Use list_snapshots to find snapshot IDs. Useful for freeing up space when the snapshot limit is reached.
-
delete_workflowDestructivePermanently delete a workflow by ID. This cannot be undone. **Two-phase flow (required):** 1. Call with just `workflowId` to get a deletion preview. Response: `{ pendingDele...
-
discard_draftDestructiveDiscard the draft snapshot for a live workflow. The live pipeline config stays unchanged. Use this to abandon draft changes and go back to the current live version.
-
remove_stepDestructiveRemove a step from a workflow with optional next-pointer rewiring. When rewireNext is true (default): steps that pointed to the removed step are rewired to the removed step's n...
-
revoke_shareDestructiveRevoke/delete share by share id.
-
update_agentDestructiveSurgical update of one agent. **Preferred path for any single-field edit on an existing agent** — only the fields in `updates` / `replace` / `unset` are touched, every other fie...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.