Critical-risk tools in Award Travel Finder
6 of the 67 tools in Award Travel Finder are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_route_monitorDestructiveCancel an active route monitor by ID. Cancelled monitors stop firing but are preserved for history.
-
delete_client_portfolioDestructivePermanently delete a client portfolio. Pro tier.
-
delete_flight_bookingDestructiveCancel/remove a tracked flight booking.
-
delete_hotel_bookingDestructiveRemove a tracked hotel booking from the user's portfolio. Use when the trip is cancelled or the booking was added by mistake.
-
delete_loyalty_statusDestructiveRemove a tracked elite/loyalty status (e.g. when it lapses and the user doesn't want to renew it).
-
compare_transfer_optionsFinancialCompare every credit-card transfer route to a target loyalty program (base ratio + any active transfer bonus). Useful when a redemption needs N points of a specific currency. Pr...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.