Critical-risk tools in Scifinder Route

Critical severity Scifinder Route MCP Server 5 of 59 tools

5 of the 59 tools in Scifinder Route are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cleanup_evidence_cache Destructive

Clean generated evidence/cache files without deleting source documents.
delete_zotero_mcp_endpoint Destructive

Delete a Zotero MCP endpoint from the separate Web UI config YAML.
empty_trash Destructive

Permanently delete all trashed records and their dependent indexes.
reparse_document Destructive

Clear extracted reactions for a document and parse it again.
unlink_reaction_link Destructive

Remove an incorrect reaction-level link.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Scifinder Route

Tools at critical risk

Attacks that target this class

More on Scifinder Route

Enforce policy on every Scifinder Route tool call.