Critical-risk tools in QGIS MCP

Critical severity QGIS MCP MCP Server 6 of 100 tools

6 of the 100 tools in QGIS MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_features Destructive

Delete features by feature IDs or expression filter.
delete_field Destructive

Delete a field from a vector layer.
remove_bookmark Destructive

Remove a spatial bookmark by its ID.
remove_layer Destructive

Remove a layer from the project by its layer ID. This is irreversible.
remove_layout Destructive

Remove a print layout from the project.
remove_map_theme Destructive

Remove a map theme by name.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in QGIS MCP

Tools at critical risk

Attacks that target this class

More on QGIS MCP

Enforce policy on every QGIS MCP tool call.