Critical-risk tools in Bexio

Critical severity Bexio MCP Server 34 of 276 tools

34 of the 276 tools in Bexio are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_invoice Destructive

Cancel an invoice
delete_absence Destructive

Delete an absence record. Requires Bexio Payroll module subscription.
delete_additional_address Destructive

Delete an additional address from a contact
delete_bill Destructive

Delete a bill (creditor invoice)
delete_contact Destructive

Delete a contact (soft delete -- moves to trash). Use restore_contact to recover.
delete_contact_group Destructive

Delete a contact group by ID
delete_contact_relation Destructive

Delete a contact relation
delete_country Destructive

Delete a country by ID
delete_currency Destructive

Delete a currency by ID. Cannot delete currencies in use by documents.
delete_expense Destructive

Delete an expense
delete_fictional_user Destructive

Delete a fictional user
delete_file Destructive

Delete a file from Bexio
delete_invoice Destructive

Delete an invoice
delete_item Destructive

Delete an item
delete_manual_entry Destructive

Delete a manual entry
delete_milestone Destructive

Delete a milestone from a project in Bexio
delete_note Destructive

Delete a note by ID
delete_order Destructive

Delete an order
delete_order_repetition Destructive

Delete repetition settings for an order
delete_outgoing_payment Destructive

Delete an outgoing payment
delete_payment Destructive

Delete a payment
delete_project Destructive

Delete a project from Bexio by ID. Consider using archive_project instead for data retention.
delete_purchase_order Destructive

Delete a purchase order
delete_quote Destructive

Delete a quote
delete_reminder Destructive

Delete a reminder
delete_salutation Destructive

Delete a salutation by ID
delete_task Destructive

Delete a task by ID
delete_timesheet Destructive

Delete a timesheet entry by ID
delete_title Destructive

Delete a title by ID
delete_unit Destructive

Delete a unit by ID
delete_work_package Destructive

Delete a work package from a project in Bexio
create_payment Financial

Create a new payment for an invoice
create_payment_type Financial

Create a new payment type for invoices and payments
send_invoice Financial

Send an invoice

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Bexio

Tools at critical risk

Attacks that target this class

More on Bexio

Let agents act without letting them run wild.