Critical-risk tools in ScopeGate

Critical severity ScopeGate MCP Server 32 of 385 tools

32 of the 385 tools in ScopeGate are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

airtable_delete_record Destructive

Delete an Airtable record
calendar_delete_event Destructive

Delete a calendar event
calendly_cancel_event Destructive

Cancel a Calendly event
drive_delete_file Destructive

Delete a file from Google Drive
email_delete_message Destructive

Permanently delete an email message
googleAds_remove_extension Destructive

Remove (unlink) a sitelink or callout extension from a campaign or account
googleAds_remove_keyword Destructive

Remove a keyword from an ad group
googleAds_remove_negative_keyword Destructive

Remove a negative keyword. Provide campaignId for campaign-level or adGroupId for ad-group-level.
googleTagManager_delete_container Destructive

Delete a GTM container
googleTagManager_delete_environment Destructive

Delete a GTM environment
googleTagManager_delete_folder Destructive

Delete a folder from a GTM workspace
googleTagManager_delete_tag Destructive

Delete a tag from a GTM workspace
googleTagManager_delete_trigger Destructive

Delete a trigger from a GTM workspace
googleTagManager_delete_user_permission Destructive

Revoke a user
googleTagManager_delete_variable Destructive

Delete a variable from a GTM workspace
googleTagManager_delete_version Destructive

Delete a GTM container version
googleTagManager_delete_workspace Destructive

Delete a GTM workspace
linkedin_delete_post Destructive

Delete a LinkedIn post by its URN
notion_delete_block Destructive

Delete (archive) a Notion block
salesforce_delete_record Destructive

Delete a Salesforce record
searchConsole_delete_site Destructive

Remove a site from Google Search Console
searchConsole_delete_sitemap Destructive

Delete a sitemap from Google Search Console
threads_delete_thread Destructive

Delete a thread by ID
twitter_delete_tweet Destructive

Delete a tweet by ID
twitter_unbookmark_tweet Destructive

Remove a tweet from bookmarks
youtube_delete_caption Destructive

Delete a caption track from a YouTube video
youtube_delete_channel_section Destructive

Delete a section from a YouTube channel
youtube_delete_comment Destructive

Delete a YouTube comment
youtube_delete_playlist Destructive

Delete a YouTube playlist
youtube_delete_video Destructive

Delete a YouTube video
youtube_remove_playlist_item Destructive

Remove a video from a YouTube playlist
youtube_unset_watermark Destructive

Remove the watermark image from a YouTube channel

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in ScopeGate

Tools at critical risk

Attacks that target this class

More on ScopeGate

Enforce policy on every ScopeGate tool call.