Critical-risk tools in VaultCrux Memory Core

Critical severity VaultCrux Memory Core MCP Server 2 of 76 tools

2 of the 76 tools in VaultCrux Memory Core are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

revoke_seat Destructive

Remove a member from the organisation by revoking their seat. Prefer `cuecrux_session` as your first and only direct MCP call. It returns a typed capability plan that routes th...
unwatch_answer Destructive

Remove an existing watch by its watch ID. Prefer `cuecrux_session` as your first and only direct MCP call. It returns a typed capability plan that routes this tool (and every o...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in VaultCrux Memory Core

Tools at critical risk

Attacks that target this class

More on VaultCrux Memory Core

Let agents act without letting them run wild.