Critical-risk tools in Kiln

Critical severity Kiln MCP Server 15 of 402 tools

15 of the 402 tools in Kiln are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_print Destructive

cancel_print
cancel_print_recovery Destructive

Cancel an active recovery session.
cancel_print_service_order Destructive

Cancel a print service order.
cancel_split_plan Destructive

Cancel all pending/in-progress parts of a split plan.
delete_agent_note Destructive

Remove a stored note or preference.
delete_cached_model Destructive

Remove a model from the local cache (file and metadata).
delete_file Destructive

Delete a G-code file from the printer's storage.
delete_shipping_profile Destructive

Delete a saved local shipping profile.
fulfillment_cancel Destructive

Cancel a fulfillment order (if still cancellable).
remove_mesh_floating_regions Destructive

remove_mesh_floating_regions
remove_spool Destructive

Remove a filament spool from inventory.
rollback_design_version Destructive

rollback_design_version
rollback_firmware Destructive

rollback_firmware
untrust_printer Destructive

Remove a printer hostname/IP from the trusted whitelist.
record_revenue Financial

record_revenue

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Kiln

Tools at critical risk

Attacks that target this class

More on Kiln

Enforce policy on every Kiln tool call.