Critical-risk tools in Tick

Critical severity Tick MCP Server 7 of 71 tools

7 of the 71 tools in Tick are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

batch_delete_tasks Destructive

Delete multiple tasks at once via V2 batch.
delete_habit Destructive

Delete a habit permanently.
delete_project Destructive

Permanently delete a project and ALL its tasks. ⚠️ IRREVERSIBLE.
delete_query_preset Destructive

Delete a saved query preset.
delete_tag Destructive

Delete a tag. Removes it from all tasks.
delete_task Destructive

Permanently delete a task. ⚠️ IRREVERSIBLE.
merge_tags Destructive

Merge one tag into another. Tasks with source get target instead; source is deleted.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Tick

Tools at critical risk

Attacks that target this class

More on Tick

Enforce policy on every Tick tool call.