Critical-risk tools in Gandi

Critical severity Gandi MCP Server 27 of 187 tools

27 of the 187 tools in Gandi are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

gandi_cert_revoke Destructive

Revoke an issued certificate.
gandi_comment_delete Destructive

Delete the comment on a Gandi object.
gandi_domain_delete Destructive

Delete a domain (restricted — typically only works on test TLDs).
gandi_domain_delete_dnssec_key Destructive

Remove a DS record from the registry.
gandi_domain_delete_glue_record Destructive

Delete a glue record.
gandi_domain_delete_tags Destructive

Remove all operator-defined tags from a domain.
gandi_domain_delete_web_redirection Destructive

Delete a web redirection by host.
gandi_email_delete_forward Destructive

Delete a forwarding address.
gandi_email_delete_mailbox Destructive

Delete a mailbox (frees the slot — mail is destroyed).
gandi_email_purge_mailbox Destructive

Purge the contents of a mailbox (destroys all mail, keeps the mailbox).
gandi_linkedzone_delete_zone Destructive

Delete a linked zone.
gandi_livedns_delete_all_records Destructive

Delete ALL records in a zone (highly destructive — snapshot first).
gandi_livedns_delete_dnssec_key Destructive

Delete a LiveDNS DNSSEC key.
gandi_livedns_delete_named_records Destructive

Delete ALL records under a name (every type).
gandi_livedns_delete_record Destructive

Delete a specific (name, type) record set.
gandi_livedns_delete_snapshot Destructive

Delete a zone snapshot.
gandi_mailbox_delete_forward Destructive

Delete a mailbox forward by source address (current mailbox product).
gandi_mailbox_delete_mailbox Destructive

Delete a mailbox (current mailbox product, not legacy email).
gandi_simplehosting_delete_instance Destructive

Delete a Simple Hosting instance.
gandi_simplehosting_delete_vhost Destructive

Delete a vhost from a Simple Hosting instance.
gandi_simplehosting_purge_vhost_cache Destructive

Purge the cache of a vhost on a Simple Hosting instance.
gandi_domain_register Financial

gandi_domain_register
gandi_domain_renew Financial

gandi_domain_renew
gandi_domain_transfer_in Financial

gandi_domain_transfer_in
gandi_email_refund_slot Financial

Refund/delete an unused slot (within the refund window).
gandi_mailbox_buy_product Financial

gandi_mailbox_buy_product
gandi_mailbox_renew_mailbox Financial

gandi_mailbox_renew_mailbox

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Gandi

Tools at critical risk

Attacks that target this class

More on Gandi

Enforce policy on every Gandi tool call.