Critical-risk tools in Twenty MCP Server

Critical severity Twenty MCP Server MCP Server 31 of 219 tools

31 of the 219 tools in Twenty MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

deleteOneAttachment Destructive

Delete One attachment
deleteOneBlocklist Destructive

Delete One blocklist
deleteOneCalendarChannel Destructive

Delete One calendarChannel
deleteOneCalendarChannelEventAssociation Destructive

Delete One calendarChannelEventAssociation
deleteOneCalendarEvent Destructive

Delete One calendarEvent
deleteOneCalendarEventParticipant Destructive

Delete One calendarEventParticipant
deleteOneCompany Destructive

Delete One company
deleteOneConnectedAccount Destructive

Delete One connectedAccount
deleteOneFavorite Destructive

Delete One favorite
deleteOneFavoriteFolder Destructive

Delete One favoriteFolder
deleteOneMessage Destructive

Delete One message
deleteOneMessageChannel Destructive

Delete One messageChannel
deleteOneMessageChannelMessageAssociation Destructive

Delete One messageChannelMessageAssociation
deleteOneMessageFolder Destructive

Delete One messageFolder
deleteOneMessageParticipant Destructive

Delete One messageParticipant
deleteOneMessageThread Destructive

Delete One messageThread
deleteOneNote Destructive

Delete One note
deleteOneNoteTarget Destructive

Delete One noteTarget
deleteOneOpportunity Destructive

Delete One opportunity
deleteOnePerson Destructive

Delete One person
deleteOneTask Destructive

Delete One task
deleteOneTaskTarget Destructive

Delete One taskTarget
deleteOneTimelineActivity Destructive

Delete One timelineActivity
deleteOneView Destructive

Delete One view
deleteOneViewField Destructive

Delete One viewField
deleteOneViewFilter Destructive

Delete One viewFilter
deleteOneWorkflow Destructive

Delete One workflow
deleteOneWorkflowAutomatedTrigger Destructive

Delete One workflowAutomatedTrigger
deleteOneWorkflowRun Destructive

Delete One workflowRun
deleteOneWorkflowVersion Destructive

Delete One workflowVersion
deleteOneWorkspaceMember Destructive

Delete One workspaceMember

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Twenty MCP Server

Tools at critical risk

Attacks that target this class

More on Twenty MCP Server

Enforce policy on every Twenty MCP Server tool call.