Critical-risk tools in Genesis
27 of the 252 tools in Genesis are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
beacons_revokeBridgeDeviceDestructiveRevoke bridge device (DELETE /v1/beacons/bridge/devices/{id}) [service status: unverified]
-
dials_deleteNumberDestructiveRelease an owned number at its carrier through DELETE (DELETE /v1/dials/numbers/{number_id}) [service status: unverified]
-
fleets_cancelTaskDestructiveCancel an organization task (POST /v1/fleets/tasks/{task_id}/cancel) [service status: unverified]
-
fleets_deleteConnectionDestructiveDisconnect the organization Foundry key (DELETE /v1/fleets/connection) [service status: unverified]
-
flocks_revokeNodeDestructiveRevoke an org-owned node binding immediately (DELETE /v1/flocks/byom/nodes/{id}) [service status: not_deployed]
-
flocks_rotateNodeCredentialDestructivePrepare a fixed-scope key, persist it, then commit; cancel an uncertain prepare before retrying (POST /v1/flocks/nodes/{id}/credential:rotate) [service status: not_deployed]
-
hives_cancel_deploymentDestructiveCancel a pending deployment and stop its runtime work (POST /v1/hives/projects/{project_id}/deployments/{deployment_id}/cancel) [service status: down]
-
hives_delete_bucketDestructiveDelete a storage bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}) [service status: down]
-
hives_delete_cronDestructiveDelete a cron job (DELETE /v1/hives/projects/{project_id}/cron/{cron_id}) [service status: down]
-
hives_delete_deploymentDestructiveDelete an inactive deployment (DELETE /v1/hives/projects/{project_id}/deployments/{deployment_id}) [service status: down]
-
hives_delete_dlq_native_queueDestructivehives_delete_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq/{message_id}) [service status: down]
-
hives_delete_functionDestructiveUnregister an owned function before removing metadata (DELETE /v1/hives/projects/{project_id}/functions/{function_id}) [service status: down]
-
hives_delete_native_queueDestructivehives_delete_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}) [service status: down]
-
hives_delete_native_topicDestructivehives_delete_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id}) [service status: down]
-
hives_delete_objectDestructiveDelete an object from a bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects/{key}) [service status: down]
-
hives_delete_object_by_keyDestructivehives_delete_object_by_key (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects) [service status: down]
-
hives_delete_secretDestructiveDelete a secret (DELETE /v1/hives/projects/{project_id}/secrets/{secret_id}) [service status: down]
-
hives_delete_volumeDestructiveDelete a detached volume and its data (DELETE /v1/hives/projects/{project_id}/volumes/{volume_id}) [service status: down]
-
hives_detach_context_projectDestructivehives_detach_context_project (DELETE /v1/hives/context/project) [service status: down]
-
hives_marketplace_uninstallDestructivePersist uninstall intent before stopping every retained workload. (DELETE /v1/hives/projects/{project_id}/marketplace/installed/{installation_id}) [service status: down]
-
hives_purge_dlq_native_queueDestructivehives_purge_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq) [service status: down]
-
hives_purge_native_queueDestructivehives_purge_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/purge) [service status: down]
-
hives_remove_native_queue_consumerDestructivehives_remove_native_queue_consumer (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/consumer) [service status: down]
-
hives_unsubscribe_native_topicDestructivehives_unsubscribe_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id}/subscriptions/{subscription_id}) [service status: down]
-
iam_revokeApiKeyDestructiveRevoke API key (DELETE /v1/iam/api-keys/{key_id}) [service status: not_deployed]
-
relays_deleteRecordDestructiveDelete a record (DELETE /v1/relays/zones/{zone}/records/{recordId}) [service status: unverified]
-
runner_cancelJobDestructiveRequest cancellation of a Runner job (POST /v1/runner/jobs/{jobId}/cancel) [service status: not_deployed]
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.