Critical-risk tools in ASUS Merlin Router MCP Server
6 of the 47 tools in ASUS Merlin Router MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
remove_dhcp_reservationDestructiveRemove DHCP reservation by MAC or IP address
-
remove_keyword_filterDestructiveRemove keyword from filter list
-
remove_mac_filterDestructiveRemove device from MAC filter
-
remove_network_service_filter_ruleDestructiveRemove network service filter rule by matching all criteria exactly
-
remove_url_filterDestructiveRemove URL pattern from global filter list
-
remove_vpn_routing_policyDestructiveRemove device from VPN Director routing (Asuswrt-Merlin firmware only). Device will return to normal routing (no VPN). Requires Merlin firmware - stock ASUS firmware not supported.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.