Critical-risk tools in Yaver
45 of the 645 tools in Yaver are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
acl_remove_peerDestructiveDisconnect from an MCP peer.
-
cancel_scheduleDestructiveCancel/remove a scheduled task by ID.
-
cloud_destroyDestructiveTear down Yaver Cloud deployment (exports data first).
-
companion_downDestructiveDisarm a companion project: remove its scheduled crons and stop/remove its durable service units.
-
data_deleteDestructiveDelete a record by id.
-
db_pushDestructivePush schema directly to database (dev only, skips migration files).
-
db_resetDestructiveDrop all tables, re-migrate, and re-seed. Requires force=true.
-
db_restoreDestructiveRestore database from a backup file.
-
dns_flushDestructiveRemove all yaver-managed DNS entries and flush DNS cache.
-
dns_removeDestructiveDelete a DNS record by id (Cloudflare only — returns a manual removal hint otherwise). Owner-only.
-
docker_pruneDestructivePrune Docker resources (containers, images, volumes, networks, or all).
-
docker_rmDestructiveRemove a container.
-
docker_rmiDestructiveRemove an image.
-
feedback_deleteDestructiveRemove a feedback report. Destructive.
-
forgot_passwordDestructiveSend a password reset email to an email-authenticated Yaver user. The reset link expires in 1 hour. Rate-limited to 5 requests per email per day.
-
git_member_removeDestructiveRemove a collaborator from a GitHub or GitLab repo and report whether the call used CLI transport or direct REST.
-
git_stashDestructiveManage git stashes (list, save, pop, apply, drop).
-
guest_deleteDestructiveDelete a guest row from YOUR host guest list. This first revokes/cancels any live access, then hides the old invite/access row from normal lists. It is not a block: you can invi...
-
guest_revokeDestructiveRemove SOMEONE ELSE'S access to YOUR machines. You are the host here: this kicks a guest out of your own shared infra, removing both their pending invitation and their active ac...
-
jobs_cancelDestructiveDrop a pending queue job.
-
machine_onboarding_removeDestructiveRemove GitHub/GitLab onboarding from the local machine or from one or more owned Yaver machines. Can remove clone credentials, CI/deploy vault tokens, or both.
-
machine_removeDestructivePermanently remove Yaver from this owned host machine: unregister the device, remove auto-start service, wipe ~/.yaver, then shut the agent down. Requires confirm=true and phras...
-
migrate_rollbackDestructiveRollback a migration step.
-
models_removeDestructiveRemove an Ollama model to free disk space.
-
monitor_removeDestructiveDelete an uptime monitor by id or name.
-
phone_project_deleteDestructiveDelete a phone project (removes the SQLite file and manifest).
-
proxy_removeDestructiveRemove a reverse proxy route.
-
relay_clear_passwordDestructiveRemove the default relay server password.
-
release_rollbackDestructiveRoll a channel's latest pointer back to a previously published semver.
-
remote_destroyDestructiveDestroy a remote VPS.
-
remove_relay_serverDestructiveRemove a relay server by ID.
-
runner_queue_clearDestructiveDrop queued prompts (one session or all). Destructive.
-
services_removeDestructiveRemove a service from the local stack.
-
sourcemaps_deleteDestructiveRemove the source map for a specific app + version tuple. Destructive.
-
switch_cleanupDestructiveDelete expired snapshots and pre-switch branches.
-
switch_rollbackDestructiveRoll back a switch (git branch + env + data restore). Only valid within the 7-day TTL.
-
tunnel_removeDestructiveRemove a Cloudflare Tunnel by ID or URL.
-
yaver_ask_userDestructiveAsk the human running this Yaver task a single structured question (Claude-Code-style: short 'header' chip + 2-4 'choices', optional multi-select, free-text 'Other' is always of...
-
yaver_auth_factory_resetDestructiveReset local Yaver auth state on this machine, then restart sign-in from the canonical hosted backend. Useful when browser OAuth succeeded but the local agent kept validating aga...
-
yaver_auth_logoutDestructiveClear the saved Yaver auth token from ~/.yaver/config.json on this machine. Daemon is left running — call agent_shutdown separately if you want to stop it.
-
yaver_clear_logsDestructiveClear the agent log file.
-
cloud_scaleFinancialChange Yaver Cloud plan tier.
-
yaver_billing_checkoutFinancialGet a payment link to subscribe to a Yaver plan. plan="relay" = Relay Pro ($9/mo private relay). plan="workspace" = Cloud Workspace ($29/mo saved cloud workspace, Relay Pro incl...
-
yaver_billing_manageFinancialGet the link to manage an existing Yaver subscription — update payment, change plan, or cancel. Returns the Yaver dashboard billing URL (LemonSqueezy receipt emails also link to...
-
yaver_managed_cloud_onboardingFinancialHigh-level guided MCP flow for buying and onboarding a Yaver managed cloud machine. Always returns status and post-purchase repo/credential sync steps. Only creates a checkout U...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.