Critical-risk tools in Eduframe

Critical severity Eduframe MCP Server 30 of 189 tools

30 of the 189 tools in Eduframe are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_enrollment Destructive

Cancel an enrollment
cancel_order Destructive

Cancel an order
cancel_planned_course Destructive

Cancel a planned course.
cancel_program_enrollment Destructive

Cancel a program enrollment
delete_affiliation Destructive

Delete an affiliation
delete_authentication_from_user Destructive

Remove an authentication from a user.
delete_certificate_from_program_enrollment Destructive

Deletes a certificate from a program enrollment
delete_comment Destructive

Delete a comment.
delete_course_location Destructive

Delete a course location.
delete_custom_record Destructive

Delete a custom record
delete_grade Destructive

Delete a grade.
delete_invoice_payment_by_id_and_invoice_id Destructive

Delete a payment.
delete_label Destructive

Delete a label
delete_lead Destructive

Delete a lead.
delete_material Destructive

Delete a material.
delete_material_group Destructive

Delete a material group.
delete_meeting Destructive

Delete a meeting.
delete_meeting_location Destructive

Delete a course location.
delete_option_of_custom_field Destructive

Delete an option from custom field
delete_organization_affiliation Destructive

Delete an organization affiliation record
delete_planning_attendee Destructive

Remove a teacher from a meeting or planning event.
delete_planning_event Destructive

Delete a planning event.
delete_program Destructive

Delete a program
delete_program_edition Destructive

Delete a program edition
delete_program_element Destructive

Delete a element
delete_task Destructive

Delete a task.
delete_teacher_enrollment Destructive

Delete a teacher enrollment.
delete_teacher_role Destructive

Delete a teacher role.
delete_webhook Destructive

Delete a webhook.
create_invoice_payment_by_invoice_id Financial

Create a payment.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Eduframe

Tools at critical risk

Attacks that target this class

More on Eduframe

Enforce policy on every Eduframe tool call.