Critical-risk tools in Meta MCP Server
16 of the 200 tools in Meta MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
meta_delete_adDestructiveDeletes an ad permanently. Args: - ad_id (string): Ad ID to delete
-
meta_delete_ad_ruleDestructiveDeletes an automated ad rule. Args: - rule_id (string): Ad rule ID
-
meta_delete_adsetDestructiveDeletes an ad set permanently. Args: - adset_id (string): Ad set ID to delete
-
meta_delete_campaignDestructiveDeletes (archives) a campaign. This cannot be undone. Args: - campaign_id (string): Campaign ID to delete
-
meta_delete_commentDestructiveDeletes a comment on a Facebook Page post. Permanent action. Args: - comment_id (string): Comment ID to delete - page_id (string): Page ID (for authentication)
-
meta_delete_custom_audienceDestructiveDeletes a custom audience permanently. This cannot be undone. Args: - audience_id (string): Custom audience ID to delete
-
meta_delete_instagram_commentDestructiveDeletes a comment on an Instagram media object. This is permanent. Args: - comment_id (string): The comment ID to delete
-
meta_delete_instagram_mediaDestructiveDeletes an Instagram media object (post, reel, story). This is permanent. Args: - media_id (string): Instagram media ID to delete
-
meta_delete_pixelDestructiveDeletes a Meta Pixel. Args: - pixel_id (string): Pixel ID to delete
-
meta_delete_postDestructiveDeletes a post from a Facebook Page. This action is permanent and cannot be undone. Args: - post_id (string): The post ID to delete (format: {page_id}_{post_id}) - page_id ...
-
meta_delete_productDestructiveDeletes a product from a catalog. Args: - product_id (string): The product ID This action is permanent and cannot be undone.
-
meta_delete_saved_audienceDestructiveDeletes a saved audience. Args: - audience_id (string): Saved audience ID
-
threads_delete_postDestructiveDeletes a Threads post permanently. Args: - media_id (string): Threads media ID to delete
-
meta_end_live_videoDestructiveEnds an active live video broadcast. Requires: meta_list_pages called first to load page tokens. Args: - live_video_id (string): The live video ID to end - page_id (string...
-
meta_create_adsetFinancialCreates a new ad set within a campaign. Args: - ad_account_id (string): Ad account ID (e.g., act_123456789) - campaign_id (string): Parent campaign ID - name (string): Ad...
-
meta_create_campaignFinancialCreates a new campaign in a Meta ad account. Args: - ad_account_id (string): Ad account ID (e.g., act_123456789) - name (string): Campaign name - objective (string): Camp...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.