Critical-risk tools in LocalWP MCP

Critical severity LocalWP MCP MCP Server 3 of 29 tools

3 of the 29 tools in LocalWP MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cleanup_backups Destructive

Deletes managed backup artifacts for the selected LocalWP site based on age and/or retention. Requires the
delete_backup Destructive

Deletes one managed backup artifact for the selected LocalWP site. Requires the
delete_site_file Destructive

Deletes a file or directory inside the selected LocalWP site. Requires the

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in LocalWP MCP

Tools at critical risk

Attacks that target this class

More on LocalWP MCP

Enforce policy on every LocalWP MCP tool call.