Critical-risk tools in Agentled
5 of the 56 tools in Agentled are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_agentDestructive 4/5Permanently delete an agent and all its files. Also deletes the linked proactive agent.
-
delete_snapshotDestructive 4/5Delete a specific config snapshot. Use list_snapshots to find snapshot IDs. Useful for freeing up space when the snapshot limit is reached.
-
delete_workflowDestructive 4/5Permanently delete a workflow by ID. This is a two-phase operation: 1. Call with just workflowId to get a deletion preview (what will be deleted) and a confirmToken. 2. Call aga...
-
discard_draftDestructive 4/5Discard the draft snapshot for a live workflow. The live pipeline config stays unchanged. Use this to abandon draft changes and go back to the current live version.
-
remove_stepDestructive 4/5Remove a step from a workflow with optional next-pointer rewiring. When rewireNext is true (default): steps that pointed to the removed step are rewired to the removed step's n...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on Agentled
Enforce policy on Agentled
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init