Critical-risk tools in Neuron
65 of the 401 tools in Neuron are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
neuron_cancel_approvalDestructiveCancel a still-pending approval (e.g. the upstream action was aborted). Fires the approval.cancelled callback. Requires a bot API key.
-
neuron_cancel_bookingDestructiveCancel a confirmed or pending booking. Sends cancellation notifications to the invitee.
-
neuron_cancel_flow_runDestructiveCancel a running or waiting flow execution. Steps already completed are not rolled back.
-
neuron_cancel_scheduled_messageDestructiveCancel a scheduled message to prevent it from being sent. Only messages with status 'scheduled' can be cancelled. This action cannot be undone.
-
neuron_clear_chatDestructiveDelete messages (and their media) from chats; the conversations stay, empty. Chats a human is currently handling, or that a flow is waiting on, are skipped. Only Neuron's copy —...
-
neuron_clear_mediaDestructiveRemove media files (photos, videos, voice notes, documents) from chats while keeping the messages and captions; chats show 'Media removed'. Only Neuron's copy — nothing is delet...
-
neuron_delete_ad_requestDestructivePermanently delete a draft ad request. Only ad requests in draft status can be deleted.
-
neuron_delete_blog_postDestructivePermanently delete a blog post by its ID. This action cannot be undone.
-
neuron_delete_botDestructivePermanently delete a bot and all its associated data. This action cannot be undone.
-
neuron_delete_broadcastDestructivePermanently delete a broadcast and its recipient data. This action cannot be undone.
-
neuron_delete_calendarDestructivePermanently delete a calendar and all its event types, bookings, and availability data.
-
neuron_delete_campaignDestructivePermanently delete a campaign that is in 'draft' status. Active or funded campaigns cannot be deleted.
-
neuron_delete_channelDestructivePermanently delete a WhatsApp channel and disconnect any active sessions. This action cannot be undone.
-
neuron_delete_contactDestructivePermanently delete a contact and remove them from all contact lists. This action cannot be undone.
-
neuron_delete_contact_listDestructivePermanently delete a contact list. System-protected lists (e.g., 'Do Not Contact') cannot be deleted.
-
neuron_delete_eventDestructiveDelete a host-created event. For recurring events, use scope to control what gets deleted: 'single' (just this one), 'future' (this and all future), or 'all' (entire series).
-
neuron_delete_event_typeDestructivePermanently delete an event type and all its bookings.
-
neuron_delete_flowDestructiveSoft-delete a flow. It stops running but can be restored. Running executions are not cancelled.
-
neuron_delete_flow_runDestructivePermanently delete a completed, failed, or cancelled flow run and all its step data.
-
neuron_delete_kb_entryDestructivePermanently delete a specific entry from a knowledge base.
-
neuron_delete_knowledge_baseDestructivePermanently delete a knowledge base and all its associated entries and documents.
-
neuron_delete_list_campaignDestructivePermanently delete a paced list campaign and its reached-set. Does not delete the contacts or the list.
-
neuron_delete_messageDestructivePermanently delete a specific message from a conversation. This action cannot be undone.
-
neuron_delete_newsletterDestructivePermanently delete a WhatsApp Channel newsletter and remove it from WhatsApp. This action cannot be undone.
-
neuron_delete_outbound_webhookDestructivePermanently remove an outbound webhook. The external endpoint will no longer receive event notifications from this bot.
-
neuron_delete_overrideDestructiveRemove a date-specific availability override, reverting to the default weekly hours.
-
neuron_delete_personaDestructiveDelete a voice persona.
-
neuron_delete_productDestructivePermanently delete a product. Existing orders are retained.
-
neuron_delete_sms_campaignDestructiveDelete a draft SMS campaign. Only draft campaigns can be deleted.
-
neuron_delete_social_channelDestructivePermanently delete a social media channel and disconnect any active sessions. This action cannot be undone.
-
neuron_delete_taskDestructiveDelete a scheduled task. This is a soft delete — the task stops running immediately.
-
neuron_delete_toolDestructivePermanently remove a custom API tool integration from a bot. The bot will no longer be able to invoke this tool in conversations.
-
neuron_delete_webhookDestructivePermanently remove an inbound webhook from a bot. External services will no longer be able to trigger this endpoint.
-
neuron_duplicate_productDestructiveClone an existing product into a hidden draft copy (new checkout link, '(copy)' title, reset counters). A 'pool' code product is cloned with an empty pool — restock codes before...
-
neuron_leave_groupDestructiveMake the bot leave a WhatsApp group. This action is irreversible — the bot will need to be re-added by an admin.
-
neuron_logoutDestructiveClear the current auth token locally. Does NOT revoke server-side MCP tokens — revoke from the Neuron dashboard (Settings > MCP Tokens) for full invalidation.
-
neuron_post_to_newsletterDestructivePost a message to a WhatsApp Channel newsletter. All subscribers receive the message. Provide at least one of text or mediaUrl. This triggers delivery and cannot be undone.
-
neuron_post_to_statusDestructivePost a WhatsApp Status / Story from a connected direct (Baileys) WhatsApp number. Visible to the account's synced contacts for 24 hours — you do NOT specify recipients (the cont...
-
neuron_remove_bot_channelDestructiveDisconnect a WhatsApp channel from a bot. The bot will no longer respond to messages on this channel.
-
neuron_remove_group_membersDestructiveRemove members from a group, resolved from any combination of sources — e.g. remove everyone on a contact list. Address the group by its id, slug, or JID.
-
neuron_remove_memberDestructivePermanently remove a member from the organization. The member loses all access immediately. This action cannot be undone.
-
neuron_remove_profile_pictureDestructiveRemove the bot's WhatsApp profile picture, reverting to the default.
-
neuron_remove_tool_secretDestructivePermanently delete a stored secret from a custom tool integration. The tool will lose access to this credential.
-
neuron_revoke_api_keyDestructivePermanently revoke an API key to immediately invalidate it and prevent further programmatic access. This action cannot be undone.
-
neuron_revoke_group_inviteDestructiveRevoke the current group invite link and generate a new one. The old link will stop working. Requires admin.
-
neuron_revoke_invitationDestructiveRevoke a pending organization invitation so it can no longer be accepted. This action cannot be undone.
-
neuron_send_broadcastDestructiveSend a broadcast message to all its recipients. The broadcast must be in draft status. This triggers message delivery and cannot be undone.
-
neuron_sites_deleteDestructivePermanently wipe a site: every version, its files in storage, people, access requests and view history. The address stops working. Cannot be undone or recovered. Use neuron_site...
-
neuron_sites_delete_versionDestructivePermanently delete an old (non-live) version of a site, e.g. a wrong upload. Its files are removed from storage right away, except files other versions still use. The live versi...
-
neuron_stop_ad_requestDestructiveStop an active or paused ad request campaign permanently. Any remaining unspent budget is refunded to the organization wallet. This cannot be undone.
-
neuron_stop_campaignDestructivePermanently stop an active campaign and refund the remaining unspent budget to the organization's wallet. This action cannot be undone.
-
neuron_storage_jobDestructiveStatus and result of a clear-media / clear-chat job started by neuron_clear_media or neuron_clear_chat.
-
neuron_unassign_bot_from_social_channelDestructiveRemove the bot assignment from a social media channel. The bot will lose access to the channel's social media credentials.
-
neuron_unpublish_from_poolDestructivePermanently remove a published item from the marketplace pool. Organizations that installed this item will retain their copies.
-
neuron_cancel_subscriptionFinancialCancel the current active subscription. Access continues until the end of the current billing period.
-
neuron_checkoutFinancialInitiate a checkout session for a subscription plan upgrade. Returns a checkout URL or confirmation to complete the purchase.
-
neuron_create_ad_requestFinancialCreate an ad distribution request to send a message to contacts in pool lists matching target demographics. Deducts from wallet upon approval.
-
neuron_fund_ad_requestFinancialFund an approved ad request from the organization wallet. This debits the budget amount and activates the campaign for distribution. If wallet balance is insufficient, returns s...
-
neuron_fund_campaignFinancialFund an approved campaign by deducting the total budget from the organization's wallet balance. Requires sufficient wallet funds.
-
neuron_fund_walletFinancialInitialize a wallet funding transaction via Paystack. Returns a checkout URL to complete the payment in a browser.
-
neuron_refund_orderFinancialRefund a paid order via Paystack. The buyer is refunded and the sale amount is reversed from your wallet.
-
neuron_request_payoutFinancialRequest a payout to transfer funds from the organization wallet to the linked bank account. A bank account must be saved first.
-
neuron_save_bank_accountFinancialSave a verified bank account as the organization's payout destination. Verify the account first using neuron_verify_bank_account.
-
neuron_verify_bank_accountFinancialVerify a Nigerian bank account number via Paystack to confirm the account holder name before saving.
-
neuron_verify_wallet_fundingFinancialVerify a wallet funding transaction using the Paystack payment reference to confirm the payment was successful.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.