Critical-risk tools in Neuron
39 of the 231 tools in Neuron are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
neuron_delete_ad_requestDestructivePermanently delete a draft ad request. Only ad requests in draft status can be deleted.
-
neuron_delete_blog_postDestructivePermanently delete a blog post by its ID. This action cannot be undone.
-
neuron_delete_botDestructivePermanently delete a bot and all its associated data. This action cannot be undone.
-
neuron_delete_broadcastDestructivePermanently delete a broadcast and its recipient data. This action cannot be undone.
-
neuron_delete_campaignDestructivePermanently delete a campaign that is in 'draft' status. Active or funded campaigns cannot be deleted.
-
neuron_delete_channelDestructivePermanently delete a WhatsApp channel and disconnect any active sessions. This action cannot be undone.
-
neuron_delete_contactDestructivePermanently delete a contact and remove them from all contact lists. This action cannot be undone.
-
neuron_delete_contact_listDestructivePermanently delete a contact list. System-protected lists (e.g., 'Do Not Contact') cannot be deleted.
-
neuron_delete_kb_entryDestructivePermanently delete a specific entry from a knowledge base.
-
neuron_delete_knowledge_baseDestructivePermanently delete a knowledge base and all its associated entries and documents.
-
neuron_delete_messageDestructivePermanently delete a specific message from a conversation. This action cannot be undone.
-
neuron_delete_newsletterDestructivePermanently delete a WhatsApp Channel newsletter and remove it from WhatsApp. This action cannot be undone.
-
neuron_delete_outbound_webhookDestructivePermanently remove an outbound webhook. The external endpoint will no longer receive event notifications from this bot.
-
neuron_delete_toolDestructivePermanently remove a custom API tool integration from a bot. The bot will no longer be able to invoke this tool in conversations.
-
neuron_delete_webhookDestructivePermanently remove an inbound webhook from a bot. External services will no longer be able to trigger this endpoint.
-
neuron_leave_groupDestructiveMake the bot leave a WhatsApp group. This action is irreversible — the bot will need to be re-added by an admin.
-
neuron_logoutDestructiveClear the current auth token locally. Does NOT revoke server-side MCP tokens — revoke from the Neuron dashboard (Settings > MCP Tokens) for full invalidation.
-
neuron_post_to_newsletterDestructivePost a message to a WhatsApp Channel newsletter. All subscribers receive the message. Provide at least one of text or mediaUrl. This triggers delivery and cannot be undone.
-
neuron_remove_bot_channelDestructiveDisconnect a WhatsApp channel from a bot. The bot will no longer respond to messages on this channel.
-
neuron_remove_memberDestructivePermanently remove a member from the organization. The member loses all access immediately. This action cannot be undone.
-
neuron_remove_profile_pictureDestructiveRemove the bot's WhatsApp profile picture, reverting to the default.
-
neuron_remove_tool_secretDestructivePermanently delete a stored secret from a custom tool integration. The tool will lose access to this credential.
-
neuron_revoke_api_keyDestructivePermanently revoke an API key to immediately invalidate it and prevent further programmatic access. This action cannot be undone.
-
neuron_revoke_group_inviteDestructiveRevoke the current group invite link and generate a new one. The old link will stop working. Requires admin.
-
neuron_revoke_invitationDestructiveRevoke a pending organization invitation so it can no longer be accepted. This action cannot be undone.
-
neuron_send_broadcastDestructiveSend a broadcast message to all its recipients. The broadcast must be in draft status. This triggers message delivery and cannot be undone.
-
neuron_stop_ad_requestDestructiveStop an active or paused ad request campaign permanently. Any remaining unspent budget is refunded to the organization wallet. This cannot be undone.
-
neuron_stop_campaignDestructivePermanently stop an active campaign and refund the remaining unspent budget to the organization's wallet. This action cannot be undone.
-
neuron_unpublish_from_poolDestructivePermanently remove a published item from the marketplace pool. Organizations that installed this item will retain their copies.
-
neuron_cancel_subscriptionFinancialCancel the current active subscription. Access continues until the end of the current billing period.
-
neuron_checkoutFinancialInitiate a checkout session for a subscription plan upgrade. Returns a checkout URL or confirmation to complete the purchase.
-
neuron_create_ad_requestFinancialCreate an ad distribution request to send a message to contacts in pool lists matching target demographics. Deducts from wallet upon approval.
-
neuron_fund_ad_requestFinancialFund an approved ad request from the organization wallet. This debits the budget amount and activates the campaign for distribution. If wallet balance is insufficient, returns s...
-
neuron_fund_campaignFinancialFund an approved campaign by deducting the total budget from the organization's wallet balance. Requires sufficient wallet funds.
-
neuron_fund_walletFinancialInitialize a wallet funding transaction via Paystack. Returns a checkout URL to complete the payment in a browser.
-
neuron_request_payoutFinancialRequest a payout to transfer funds from the organization wallet to the linked bank account. A bank account must be saved first.
-
neuron_save_bank_accountFinancialSave a verified bank account as the organization's payout destination. Verify the account first using neuron_verify_bank_account.
-
neuron_verify_bank_accountFinancialVerify a Nigerian bank account number via Paystack to confirm the account holder name before saving.
-
neuron_verify_wallet_fundingFinancialVerify a wallet funding transaction using the Paystack payment reference to confirm the payment was successful.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.