Critical-risk tools in MCP Picnic

Critical severity MCP Picnic MCP Server 2 of 25 tools

2 of the 25 tools in MCP Picnic are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

picnic_cancel_delivery Destructive

Cancel a delivery order
picnic_clear_cart Destructive

Clear all items from the shopping cart

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in MCP Picnic

Tools at critical risk

Attacks that target this class

More on MCP Picnic

Enforce policy on every MCP Picnic tool call.