Critical-risk tools in Fleet

Critical severity Fleet MCP Server 15 of 132 tools

15 of the 132 tools in Fleet are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

fleet_delete_bootstrap_package Destructive 4/5

Delete a bootstrap package for a team
fleet_delete_host Destructive 5/5

Permanently remove a host from Fleet
fleet_delete_invite Destructive 3/5

Delete a pending invite
fleet_delete_label Destructive 4/5

Delete a label by name permanently
fleet_delete_mdm_profile Destructive 5/5

Delete an MDM configuration profile
fleet_delete_pack Destructive 4/5

Delete a query pack by name permanently
fleet_delete_policy Destructive 4/5

Delete a compliance policy permanently
fleet_delete_query Destructive 4/5

Delete a saved query permanently
fleet_delete_script Destructive 4/5

Delete a script permanently
fleet_delete_secret Destructive 5/5

Delete a secret variable by ID
fleet_delete_session Destructive 4/5

Delete and invalidate a specific session
fleet_delete_setup_assistant Destructive 4/5

Delete the MDM Apple Setup Assistant config
fleet_delete_user_sessions Destructive 4/5

Delete all sessions for a specific user
fleet_delete_vpp_token Destructive 5/5

Delete a VPP token permanently
fleet_unenroll_host_mdm Destructive 5/5

Unenrol a host from MDM management

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Fleet

Tools at critical risk

Attacks that target this class

More on Fleet

Enforce policy on Fleet