Critical-risk tools in Localstack

Critical severity Localstack MCP Server 4 of 14 tools

4 of the 14 tools in Localstack are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

localstack-cloud-pods Destructive

Manages remote LocalStack Cloud Pods with following actions: save, load, delete
localstack-deployer Destructive

Deploys or destroys AWS infrastructure on LocalStack using CDK, Terraform, or SAM.
localstack-ephemeral-instances Destructive

Manage cloud-hosted LocalStack Ephemeral Instances: create, list, fetch logs, and delete.
localstack-state-management Destructive

Export, import, reset, and inspect LocalStack state using local file-based workflows on disk.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Localstack

Tools at critical risk

Attacks that target this class

More on Localstack

Enforce policy on every Localstack tool call.