Critical-risk tools in Phrase
13 of the 145 tools in Phrase are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bqe_delete_ai_checkDestructiveDelete an AI Check from Phrase Quality Evaluator. Also removes it from any Quality Profiles that reference it. (DELETE /v1/aiChecks/{uid})
-
bqe_delete_quality_profileDestructiveDelete a Quality Profile in Phrase Quality Evaluator. AI Checks referenced by this profile are not deleted. (DELETE /v1/qualityProfiles/{uid})
-
strings_delete_branchDestructiveDelete an existing branch in a Phrase Strings project.
-
strings_delete_glossary_termDestructiveDelete an existing term from a Phrase Strings term base (glossary).
-
strings_delete_keyDestructiveDelete an existing translation key in a Phrase Strings project.
-
strings_delete_localeDestructiveDelete an existing locale in a Phrase Strings project.
-
strings_delete_projectDestructiveDelete an existing project in Phrase Strings.
-
strings_remove_job_keysDestructiveRemove translation keys from a job in a Phrase Strings project.
-
strings_remove_job_localeDestructiveRemove a target locale from a job in a Phrase Strings project.
-
tms_delete_analyses_batchDestructiveDelete multiple analyses at once from Phrase TMS (1–100 per call). Set purge=true to permanently delete instead of moving to trash. (DELETE /api2/v1/analyses)
-
tms_delete_analysisDestructiveDelete a single analysis from Phrase TMS. Set purge=true to permanently delete instead of moving to trash. (DELETE /api2/v1/analyses/{analyseUid})
-
tms_delete_quoteDestructiveDelete a quote from Phrase TMS by UID. This action is irreversible. (DELETE /api2/v1/quotes/{quoteUid})
-
tms_set_project_statusDestructiveChange the status of a Phrase TMS project. Check current status with tms_get_project first. CANCELLED is irreversible. (POST /api2/v1/projects/{projectUid}/setStatus)
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.