Critical-risk tools in Genesis
94 of the 1127 tools in Genesis are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
beacons_deleteDashboardResourceDestructiveDelete one configuration record (DELETE /v1/beacons/dashboard/fleets/{fleet_id}/resources/{family}/{resource_id})
-
beacons_revokeBridgeDeviceDestructiveRevoke bridge device (DELETE /v1/beacons/bridge/devices/{id})
-
blinds_deleteCredentialDestructiveRevoke one credential (DELETE /v1/blinds/credentials/{variable})
-
blinds_revokeAllCredentialsDestructiveRevoke every credential in the organization (DELETE /v1/blinds/credentials)
-
blinds_revokeConsentDestructiveRevoke a consent decision (DELETE /v1/blinds/consent/{consent_id})
-
blinds_revokeDelegateDestructiveRevoke a delegation (DELETE /v1/blinds/delegates/{delegate_id})
-
boxes_mail_agents_deleteDestructiveDelete an agent's mailbox (DELETE /v1/boxes/mail/agents/{agentId})
-
brews_deleteBrewDestructiveDelete a Brew from the selected project (POST /v1/brews/delete)
-
brews_uninstallBrewDestructiveUninstall an exchange Brew from the selected project (POST /v1/brews/exchange/uninstall)
-
connections_revokeDestructiveRevoke a connection (DELETE /v1/connections/{id})
-
dials_deleteNumberDestructiveRelease an owned number at its carrier through DELETE (DELETE /v1/dials/numbers/{number_id})
-
dials_deleteWorkflowDestructiveDelete an owned workflow and its routing descriptor (DELETE /v1/dials/workflows/{workflow_id})
-
fleets_cancelTaskDestructiveCancel an organization task (POST /v1/fleets/tasks/{task_id}/cancel)
-
fleets_deleteAgentDestructiveDelete a stopped persistent Henry agent (DELETE /v1/fleets/agents/{agent_id})
-
fleets_deleteComputerConnectionDestructiveRemove the organization's computer credential (DELETE /v1/fleets/computer-connection)
-
fleets_deleteConnectionDestructiveDisconnect the organization Foundry key (DELETE /v1/fleets/connection)
-
fleets_deleteWebConnectionDestructiveRemove the organization's seat web credential (DELETE /v1/fleets/web-connection)
-
fleets_killSeatDestructiveKill a seat (cancel running work now and stop the agent; resume is allowed) (POST /v1/fleets/seats/{seat_id}/kill)
-
fleets_releaseSeatDestructiveRelease a seat (settle the purse, delete the agent; terminal) (POST /v1/fleets/seats/{seat_id}/release)
-
flocks_cancelAgentDestructiveCancel the execution admitted under an idempotency key (POST /v1/flocks/agents/{agent_id}/cancel)
-
flocks_deleteAccountDestructiveRemove an inference account (DELETE /v1/flocks/accounts/{id})
-
flocks_resetAccountIdentityDestructiveClear an account's recorded identity (POST /v1/flocks/accounts/{id}/reset-identity)
-
flocks_revokeGrantDestructiveRevoke an account grant (DELETE /v1/flocks/account-grants/{grant_id})
-
flocks_revokeNodeDestructiveRevoke an org-owned node binding immediately (DELETE /v1/flocks/byom/nodes/{id})
-
flocks_rotateNodeCredentialDestructivePrepare a fixed-scope key, persist it, then commit; cancel an uncertain prepare before retrying (POST /v1/flocks/nodes/{id}/credential:rotate)
-
foundry_cancelFineTuningJobDestructiveCancel a provider fine-tuning job when contract-backed (POST /v1/foundry/fine_tuning/jobs/{job_id}/cancel)
-
foundry_deleteFileDestructiveDelete a tenant file (DELETE /v1/foundry/files/{file_id})
-
foundry_deleteFineTuningJobDestructiveDelete a terminal provider fine-tuning job (DELETE /v1/foundry/fine_tuning/jobs/{job_id})
-
foundry_deleteProviderKeyDestructiveDelete a tenant provider key (DELETE /v1/foundry/provider-keys/{provider_id})
-
garden_cancelPaymentDestructiveCancel a payment waiting for authority (POST /v1/garden/payments/{payment}/cancel)
-
garden_cancelPayoutDestructiveCancel a payout waiting for authority (POST /v1/garden/payouts/{payout}/cancel)
-
gateway_cancelCreditSubscriptionDestructiveCancel your subscription at the end of the period (DELETE /v1/credits/subscription)
-
gateway_deleteBillingContactDestructiveRemove a billing contact (DELETE /v1/orgs/{org}/billing/contacts/{contact_id})
-
gateway_deleteBillingTaxIdDestructiveRemove a tax ID (DELETE /v1/orgs/{org}/billing/tax-ids/{tax_id})
-
gears_cancelRunDestructiveCancel a running workflow run (POST /v1/gears/runs/{id}/cancel)
-
henry_deleteRunDestructiveDelete a finished run and its listing entry (DELETE /v1/henry/runs/{run_id})
-
hives_cancel_deploymentDestructiveCancel a pending deployment and stop its runtime work (POST /v1/hives/projects/{project_id}/deployments/{deployment_id}/cancel)
-
hives_cancelTimerDestructiveCancel a timer (DELETE /v1/hives/projects/{project_id}/timers/{timer_id})
-
hives_delete_bucketDestructiveDelete a storage bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id})
-
hives_delete_cronDestructiveDelete a cron job (DELETE /v1/hives/projects/{project_id}/cron/{cron_id})
-
hives_delete_deploymentDestructiveDelete an inactive deployment (DELETE /v1/hives/projects/{project_id}/deployments/{deployment_id})
-
hives_delete_dlq_native_queueDestructivehives_delete_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq/{message_id})
-
hives_delete_domainDestructiveRemove a domain from a project (DELETE /v1/hives/projects/{project_id}/domains/{domain_id})
-
hives_delete_flightDestructiveDelete a Flight (DELETE /v1/hives/projects/{project_id}/flights/{flight_id})
-
hives_delete_functionDestructiveUnregister an owned function before removing metadata (DELETE /v1/hives/projects/{project_id}/functions/{function_id})
-
hives_delete_native_queueDestructivehives_delete_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id})
-
hives_delete_native_topicDestructivehives_delete_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id})
-
hives_delete_objectDestructiveDelete an object from a bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects/{key})
-
hives_delete_object_by_keyDestructivehives_delete_object_by_key (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects)
-
hives_delete_object_named_downloadDestructiveDelete the object whose flat key is "download" (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects/download)
-
hives_delete_projectDestructiveDelete a project (DELETE /v1/hives/projects/{project_id})
-
hives_delete_project_envDestructiveDelete environment variables by name (DELETE /v1/hives/projects/{project_id}/env)
-
hives_delete_project_env_keyDestructiveDelete one environment variable by name (DELETE /v1/hives/projects/{project_id}/env/{key})
-
hives_delete_secretDestructiveDelete a secret (DELETE /v1/hives/projects/{project_id}/secrets/{secret_id})
-
hives_delete_volumeDestructiveDelete a detached volume and its data (DELETE /v1/hives/projects/{project_id}/volumes/{volume_id})
-
hives_deleteTimerTargetDestructiveDelete a timer target (DELETE /v1/hives/projects/{project_id}/timer-targets/{target_id})
-
hives_detach_context_projectDestructivehives_detach_context_project (DELETE /v1/hives/context/project)
-
hives_marketplace_uninstallDestructivePersist uninstall intent before stopping every retained workload. (DELETE /v1/hives/projects/{project_id}/marketplace/installed/{installation_id})
-
hives_marketplace_unpublishDestructiveUnpublish an owned package of the request's environment (soft delete; the package is archived). (DELETE /v1/hives/projects/{project_id}/marketplace/packages/{slug})
-
hives_purge_dlq_native_queueDestructivehives_purge_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq)
-
hives_purge_native_queueDestructivehives_purge_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/purge)
-
hives_remove_native_queue_consumerDestructivehives_remove_native_queue_consumer (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/consumer)
-
hives_sftp_deleteDestructiveDelete a file via SFTP (DELETE /v1/hives/projects/{project_id}/remote/sftp/{target_id}/delete)
-
hives_teardown_fleetDestructiveTeardown a fleet — stop all instances and remove from discovery. (DELETE /v1/hives/fleets/{fleet_id})
-
hives_unsubscribe_native_topicDestructivehives_unsubscribe_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id}/subscriptions/{subscription_id})
-
iam_revokeApiKeyDestructiveRevoke API key (DELETE /v1/iam/api-keys/{key_id})
-
minds_deleteMindDestructiveDelete an owned Mind (controller lifecycle action delete) without an automatic retry (DELETE /v1/minds/services/{mind_id})
-
minds_detachMindDestructiveDetach a canonical Mind attachment and retain its revision (DELETE /v1/minds/{mind_id}/attachments/{attachment_id})
-
minds_engineEpisodicMemoryDeleteMemoryEpisodicIdDestructiveepisodic-memory: DELETE /v1/memory/episodic/:id (DELETE /v1/minds/services/{mind_id}/engine/v1/memory/episodic/{id})
-
minds_engineKeyValueDeleteKeyspaceIdDestructivekey-value: DELETE /v1/:keyspace/:id (DELETE /v1/minds/services/{mind_id}/engine/v1/{keyspace}/{id})
-
minds_removeAgentGroupMemberDestructiveRemove a group member and retain its revision (DELETE /v1/minds/agent-groups/{group_id}/members/{agent_id})
-
one_cancelWakeupDestructiveCancel one of your wakes (DELETE /v1/one/instance/wakeups/{id})
-
orgs_cancel_formation_jobDestructiveCancel a queued or running formation run (POST /v1/orgs/formation-jobs/{job}/cancel)
-
orgs_end_seatDestructiveEnd a seat (DELETE /v1/orgs/seats/{seat})
-
orgs_remove_registered_agentDestructiveRemove the entity's registered agent (refused once formed) (DELETE /v1/orgs/entities/{entity}/registered-agent)
-
panes_deletePaneDestructiveStop and delete one Pane (browser) (DELETE /v1/panes/panes/{id})
-
relays_deleteRecordDestructiveDelete a record (DELETE /v1/relays/zones/{zone}/records/{recordId})
-
relays_deleteZoneDestructiveDelete a zone and all its records (DELETE /v1/relays/zones/{zone})
-
rigs_deleteRigDestructiveStop and delete one Rig (desktop) (DELETE /v1/rigs/{id})
-
runner_cancelJobDestructiveRequest cancellation of a Runner job (POST /v1/runner/jobs/{jobId}/cancel)
-
runner_deleteJobDestructiveDelete a finished Runner job (DELETE /v1/runner/jobs/{jobId})
-
scopes_removeDependencyDestructiveRemove a dependency (DELETE /v1/scopes/dependencies/{dependency})
-
scopes_unassignTaskDestructiveUnassign a task (DELETE /v1/scopes/tasks/{task}/assignee)
-
shells_deleteShellDestructiveStop and delete one Shell (sandbox) (DELETE /v1/shells/shells/{id})
-
shells_revokeShellEgressDestructiveTake a Shell's extra network access away (POST /v1/shells/shells/{id}/egress/revoke)
-
silos_deleteInstanceDestructiveDelete a database instance (DELETE /v1/silos/instances/{instance_id})
-
silos_deleteInstanceBranchDestructiveDelete a branch (DELETE /v1/silos/instances/{instance_id}/branches/{branch_id})
-
taps_cancelTapDestructiveCancel a tap (DELETE /v1/taps/taps/{id})
-
traces_cancelBatchScrapeDestructiveCancel a batch scrape job (POST /v1/traces/batch/scrape/{id}/cancel)
-
traces_cancelCrawlDestructiveCancel a crawl job (POST /v1/traces/crawl/{id}/cancel)
-
traces_cancelRunDestructiveCancel a run (POST /v1/traces/runs/{id}/cancel)
-
zaps_deleteZapDestructiveDelete a Zap (DELETE /v1/zaps/zaps/{name})
-
garden_createPaymentFinancialPay a vendor (POST /v1/garden/books/{books}/payments)
-
garden_finalizeInvoiceFinancialIssue a draft invoice (POST /v1/garden/invoices/{invoice}/finalize)
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.