Critical-risk tools in Snak

Critical severity Snak MCP Server 2 of 10 tools

2 of the 10 tools in Snak are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_agent Destructive

Delete/remove/destroy an agent configuration permanently. Use when user wants to delete, remove, or destroy an agent completely.
remove_mcp_server Destructive

Remove/uninstall/delete one or multiple MCP servers from an agent. Use when user wants to remove MCP server capabilities from an existing agent.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Snak

Tools at critical risk

Attacks that target this class

More on Snak

Enforce policy on every Snak tool call.