Critical-risk tools in Iconnect
14 of the 279 tools in Iconnect are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_contactDestructiveDelete a contact by ID. This action is permanent.
-
delete_eventDestructiveDelete a calendar event by ID. This action is permanent.
-
delete_noteDestructiveDelete a note by ID. The note is moved to Recently Deleted and permanently removed after 30 days.
-
delete_photosDestructiveDelete photos by local identifier. Shows macOS confirmation dialog for user approval. Requires macOS 26+ Swift bridge.
-
delete_playlistDestructiveDelete an existing playlist from Music.
-
delete_reminderDestructiveDelete a reminder by ID. This action is permanent.
-
delete_reminder_listDestructiveDelete a reminder list by name. This action is permanent and removes all reminders in the list.
-
delete_shortcutDestructiveDelete a Siri Shortcut by name. Uses the macOS shortcuts CLI (macOS 13+). This action is permanent and cannot be undone.
-
memory_forgetDestructiveDelete context-memory entries. Provide exactly one selector:
-
move_noteDestructiveMove a note to a different folder. NOTE: Apple Notes has no native move command, so this copies the note body to the target folder and deletes the original. The note will get a ...
-
remove_from_playlistDestructiveRemove a track from a playlist.
-
semantic_clearDestructiveDelete all indexed data from the local vector store AND remove corresponding entries from macOS Spotlight.
-
spotlight_clearDestructiveRemove all AirMCP entries from macOS Spotlight without clearing the local vector store. Requires Swift bridge.
-
trash_fileDestructiveMove a file or folder to the Trash using Finder.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.