Critical-risk tools in Red by Big Red Cloud

Critical severity Red by Big Red Cloud MCP Server 23 of 159 tools

23 of the 159 tools in Red by Big Red Cloud are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

brc_clear_all_company_api_keys Destructive

Clears all connection credentials for all company contexts from MCP server memory.
brc_clear_audit_log Destructive

Clear the Red audit log for this MCP server session. First call without confirmWrite: true returns confirmation_required and a payload preview — show a plain-English preview bef...
brc_clear_company_api_key Destructive

Clears the API key for a named company context from MCP server memory.
brc_delete_accrual Destructive

Removes an existing parent Accrual by id. Requires the accrual timestamp in Base64 string format. Use brc_get_accrual first to retrieve the current timestamp. Do not call with c...
brc_delete_allocation_resolver Destructive

Reverses/deletes a single allocation by allocation resolver id. Use brc_list_allocated_transactions first to find the allocation id. Do not call with confirmWrite=true until the...
brc_delete_bank_account Destructive

Deletes a BRC bank account by id. Only call this after the user has explicitly confirmed deletion. Requires routeToken from brc_route_request for the matching action workflow. C...
brc_delete_cash_payment Destructive

Deletes a BRC cash payment by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original act...
brc_delete_cash_receipt Destructive

Deletes a BRC cash receipt by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original act...
brc_delete_customer Destructive

Deletes a BRC customer by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original action ...
brc_delete_nominal_journal_batch Destructive

Removes an existing Nominal Journal Batch by id. Requires the batch timestamp in Base64 string format. Use brc_get_nominal_journal_batch first to retrieve the current timestamp....
brc_delete_payment Destructive

Deletes a BRC payment by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original action r...
brc_delete_prepayment Destructive

Removes an existing parent Prepayment by id. Requires the prepayment timestamp in Base64 string format. Use brc_get_prepayment first to retrieve the current timestamp. Do not ca...
brc_delete_product Destructive

Deletes a BRC product by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original action r...
brc_delete_purchase Destructive

Deletes a BRC purchase by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the use...
brc_delete_quote Destructive

Deletes a BRC quote by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's...
brc_delete_sales_credit_note Destructive

Deletes a BRC sales credit note by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first wit...
brc_delete_sales_entry Destructive

Deletes a BRC sales entry by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the ...
brc_delete_sales_invoice Destructive

Deletes a BRC sales invoice by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with th...
brc_delete_sales_rep Destructive

Deletes a BRC sales rep by id using timestamp confirmation. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the us...
brc_delete_supplier Destructive

Deletes a BRC supplier by id. Requires routeToken from brc_route_request for the matching action workflow. Call brc_route_request first with the user's complete original action ...
brc_red_help Destructive

MANDATORY FOR RED-HELP COMMANDS: When the user's message starts with red-help or /red-help, call this tool before searching for or calling any accounting action tool. Red Help —...
brc_route_request Destructive

MANDATORY FIRST STEP for Red requests that may create, update, delete, post, email, or batch-write company data. Classify and route a user request between Red's two main behavio...
brc_create_payment Financial

Creates a BRC payment from the Payments book. Use supplierId for supplier payments, or analysisCategoryId + accountCode for analysed bank payments. Analysis categories must be f...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Red by Big Red Cloud

Tools at critical risk

Attacks that target this class

More on Red by Big Red Cloud

Enforce policy on every Red by Big Red Cloud tool call.