Critical-risk tools in Octodet Elasticsearch

Critical severity Octodet Elasticsearch MCP Server 4 of 16 tools

4 of the 16 tools in Octodet Elasticsearch are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

bulk Destructive

Perform multiple document operations (create, update, delete) in a single API call
delete_by_query Destructive

Delete documents in an Elasticsearch index based on a query
delete_document Destructive

Delete a document from a specific Elasticsearch index
delete_index Destructive

Delete an Elasticsearch index

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Octodet Elasticsearch

Tools at critical risk

Attacks that target this class

More on Octodet Elasticsearch

Enforce policy on every Octodet Elasticsearch tool call.