Critical-risk tools in Mcp Hands
23 of the 378 tools in Mcp Hands are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
call_clearDestructiveEmpty the voice queue (use when starting a fresh call).
-
dedupe_linesDestructiveDrop duplicate lines, keeping the first (or last) occurrence.
-
deleteDestructiveDelete a file, or a directory when recursive=true.
-
empty_dirsDestructiveList empty directories (deepest first); remove=true deletes them bottom-up.
-
firewall_remove_ruleDestructiveDelete firewall rules by exact display name (netsh advfirewall firewall delete rule).
-
hosts_removeDestructiveDelete every hosts line that maps a hostname (needs an elevated shell). A hosts.bak.<stamp> copy is
-
hosts_resetDestructiveRestore the hosts file from the newest hosts.bak copy (the etc folder or %LOCALAPPDATA%\\mcp_netadv\\hosts).
-
job_cancelDestructiveCancel a background job (a running job stops before its next step).
-
memory_forgetDestructiveDelete one memory entry by id, or every entry whose text contains a phrase (confirm=True).
-
note_deleteDestructiveDelete a note by id (
-
outbox_cleanDestructiveDelete expired items from the outbox now.
-
pdf_delete_pagesDestructiveWrite a copy of a PDF without the given pages, e.g. \
-
portproxy_removeDestructiveDelete the v4tov4 portproxy rule for a listen port (listen address 0.0.0.0).
-
power_actionDestructivePower state control: cancel | poweroff | restart | logoff | hibernate (with a delay for the first three).
-
prune_backupsDestructiveReport (dry_run=true) or delete the oldest zips, keeping the
-
reg_delete_keyDestructiveDelete a key. recursive=False fails on a key that still has subkeys, recursive=True removes the whole tree.
-
reg_delete_valueDestructiveDelete one named value from a key (the unnamed default value cannot be removed this way).
-
remind_cancelDestructiveCancel a reminder created by remind_in / remind_at (by name, or
-
sort_linesDestructiveSort lines (numeric=sort as numbers, unique=drop duplicates).
-
task_deleteDestructiveDESTRUCTIVE: delete a scheduled task immediately (schtasks /delete /f). No confirmation prompt.
-
todo_deleteDestructiveDelete a todo by id (
-
winget_installedDestructiveInstalled packages: winget list when winget works, otherwise the registry uninstall keys
-
winget_uninstallDestructiveUninstall a package by exact winget id (600s budget, tail of the output).
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.