Critical-risk tools in Mcp Sitecore

Critical severity Mcp Sitecore MCP Server 24 of 153 tools

24 of the 153 tools in Mcp Sitecore are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

common-remove-archive-item Destructive 4/5

Removes items permanently from the specified archive.
common-remove-base-template-by-id Destructive 4/5

Removes a base template from a template item by its ID.
common-remove-base-template-by-path Destructive 5/5

Removes a base template from a template item by its path.
common-remove-item-version-by-id Destructive 4/5

Removes a version of a Sitecore item by ID.
common-remove-item-version-by-path Destructive 5/5

Removes a version of a Sitecore item by path.
common-reset-item-field-by-id Destructive 4/5

Resets item fields, specified as either names, fields or template fields by ID.
common-reset-item-field-by-path Destructive 5/5

Resets item fields, specified as either names, fields or template fields by path.
indexing-remove-search-index-item-by-id Destructive 4/5

Removes the item with the specified ID from the search index. Supports wildcard filtering for the index name.
indexing-remove-search-index-item-by-path Destructive 5/5

Removes the item with the specified path from the search index. Supports wildcard filtering for the index name.
item-service-delete-item Destructive 4/5

Delete a Sitecore item by its ID.
presentation-remove-placeholder-setting-by-id Destructive 4/5

Removes placeholder setting from the item specified by ID.
presentation-remove-placeholder-setting-by-path Destructive 4/5

Removes placeholder setting from the item specified by path.
presentation-remove-rendering-by-id Destructive 4/5

Removes renderings from an item by owners item ID.
presentation-remove-rendering-by-path Destructive 5/5

Removes renderings from an item by owners item path.
presentation-remove-rendering-parameter-by-id Destructive 4/5

Removes the specified rendering parameter from the rendering placed on the item specified by ID.
presentation-remove-rendering-parameter-by-path Destructive 4/5

Removes the specified rendering parameter from the rendering placed on the item specified by path.
presentation-reset-layout-by-id Destructive 4/5

Resets the layout of an item by Id.
presentation-reset-layout-by-path Destructive 5/5

Resets the layout of an item by path.
security-clear-item-acl-by-id Destructive 4/5

Clears all access rules from a Sitecore item by its ID.
security-clear-item-acl-by-path Destructive 5/5

Clears all access rules from a Sitecore item by its path.
security-remove-domain Destructive 4/5

Removes a Sitecore domain.
security-remove-role Destructive 4/5

Removes a Sitecore role.
security-remove-role-member Destructive 4/5

Removes members from a Sitecore role.
security-remove-user Destructive 4/5

Removes the Sitecore user.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Mcp Sitecore

Tools at critical risk

Attacks that target this class

More on Mcp Sitecore

Enforce policy on Mcp Sitecore