Critical-risk tools in Google Docs

Critical severity Google Docs MCP Server 7 of 26 tools

7 of the 26 tools in Google Docs are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

gdoc_delete_bullets Destructive

Remove bullets or numbering from paragraphs in a range.
gdoc_delete_content Destructive

Delete content in a range. Get indices from gdoc_get response.
gdoc_delete_footer Destructive

Delete a footer from the document. Get the footer ID from gdoc_get.
gdoc_delete_header Destructive

Delete a header from the document. Get the header ID from gdoc_get.
gdoc_delete_named_range Destructive

Delete a named range by ID or name. Does not delete the content, only the reference.
gdoc_delete_table_column Destructive

Delete a column from an existing table.
gdoc_delete_table_row Destructive

Delete a row from an existing table.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Google Docs

Tools at critical risk

Attacks that target this class

More on Google Docs

Enforce policy on every Google Docs tool call.