Critical-risk tools in Sequenzy Mcp
28 of the 222 tools in Sequenzy Mcp are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_campaignDestructiveCancel a campaign. Stops scheduled and sending campaigns (also works for paused and approval-pending ones). Remaining emails will not be sent and the campaign cannot be restarte...
-
cancel_sequence_enrollmentsDestructiveCancel active/waiting enrollments in one sequence. Provide sequenceId and exactly one target: cancelAll to drain every active/waiting enrollment (use this to fully stop a live s...
-
cancel_team_invitationDestructiveCancel a pending team invitation. Invitations that have already been accepted cannot be cancelled.
-
delete_ab_testDestructivePermanently delete a campaign A/B test and all of its variants. This cannot be undone. Running tests (testing or winner_selected) cannot be deleted, and the linked campaign must...
-
delete_ab_test_variantDestructivePermanently delete a variant from a draft campaign or sequence A/B test. This cannot be undone. Variant A is the control and cannot be deleted, and the test must keep at least t...
-
delete_api_keyDestructiveCompatibility alias for revoke_api_key. Permanently delete a company-scoped API key by ID and return non-secret metadata only. Call list_api_keys first to verify the exact target.
-
delete_audience_syncDestructiveRemove an audience sync mapping. The Meta audience itself is kept (running ads are not disrupted) - only future syncs stop.
-
delete_campaignDestructivePermanently delete a campaign. This cannot be undone. Sending, scheduled, or paused campaigns must be cancelled with cancel_campaign first.
-
delete_campaign_goalDestructiveDelete one persisted email-campaign conversion goal. SMS campaigns are not supported.
-
delete_email_componentDestructiveDelete an email component. Emails that already rendered it keep their copied blocks, so this does not change existing emails. Deleting the component pinned as the default footer...
-
delete_landing_pageDestructiveDelete a landing page
-
delete_listDestructivePermanently delete a subscriber list and remove all of its memberships. Subscribers themselves are kept. This cannot be undone.
-
delete_popupDestructivePermanently delete a saved popup and its view and conversion counts. Subscribers it already captured are not affected. To stop a popup from showing while keeping its stats, set ...
-
delete_productDestructiveDelete a product previously pushed via upsert_products (Commerce API products only), identified by your productId.
-
delete_segmentDestructivePermanently delete a segment. This cannot be undone. Subscribers are not affected.
-
delete_sequenceDestructiveDelete a sequence
-
delete_sequence_goalDestructiveDelete one persisted sequence conversion goal.
-
delete_subscriber_noteDestructiveDelete one internal subscriber note by note ID.
-
delete_tagDestructivePermanently delete a tag and remove it from all subscribers. This cannot be undone. System tags and tags used by sequences cannot be deleted.
-
delete_templateDestructiveDelete a template
-
delete_transactional_emailDestructivePermanently delete a saved transactional email template by ID or slug. Use this to retire an obsolete template: the slug stops sending and becomes free to reuse. Already-sent de...
-
delete_web_tracking_keyDestructivePermanently delete a web tracking key. Cached authorization expires within one minute, after which requests from any remaining snippet are rejected; remove the snippet from the ...
-
delete_webhookDestructivePermanently delete an outbound webhook endpoint along with its delivery history. This cannot be undone. To keep the endpoint but stop deliveries, use update_webhook with status ...
-
remove_landing_page_domainDestructiveRemove the dedicated custom domain from one landing page. The page keeps its workspace and Sequenzy fallback URLs.
-
remove_product_fileDestructiveRemove the attached distributable file from a product.
-
remove_subscriberDestructiveUnsubscribe a subscriber while preserving the record and suppression history. Only permanently deletes when hardDelete is true.
-
remove_subscribers_from_listDestructiveRemove subscribers from a list by email address. Maximum 500 emails per call. Subscribers stay in the account; only the list membership is removed. Returns the removed count plu...
-
revoke_api_keyDestructivePermanently revoke a company-scoped API key by ID. The response contains non-secret metadata only. Call list_api_keys first and compare the ID, name, prefix, and isCurrent flag ...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.