Critical-risk tools in MCP Email Service
4 of the 16 tools in MCP Email Service are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
email_deleteDestructiveDESTRUCTIVE. Defaults to dry-run; pass confirm=true to delete. By default moves to Trash; permanent=true expunges.
-
email_flagDestructiveDESTRUCTIVE. Defaults to dry-run; pass confirm=true to apply.
-
cleanupDestructiveRule-based classifier into protected_finance/protected_travel/security/support_case (never deleted) vs marketing/routine_notification (cleanup candidates) vs unknown. Returns a ...
-
email_moveDestructiveDESTRUCTIVE. Defaults to dry-run; pass confirm=true to apply.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.