Critical-risk tools in Prometheus MCP Server

Critical severity Prometheus MCP Server MCP Server 65 of 805 tools

65 of the 805 tools in Prometheus MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

bulk_delete_by_criteria Destructive

bulk_delete_by_criteria
cache_delete Destructive

Delete a value from the cache.
cache_delete_many Destructive

Delete multiple values from the cache.
cache_delete_multi Destructive

Delete multiple values from the cache (alias for delete_many).
delete Destructive

delete
delete_access_key Destructive

delete_access_key
delete_agent_runtime Destructive

delete_agent_runtime
delete_agent_runtime_endpoint Destructive

delete_agent_runtime_endpoint
delete_app Destructive

delete_app
delete_datastore Destructive

Delete a data store from AWS HealthImaging.
delete_ecs_infrastructure Destructive

delete_ecs_infrastructure
delete_fhir_resource Destructive

Delete a FHIR resource from HealthLake
delete_group Destructive

delete_group
delete_image_set Destructive

delete_image_set
delete_instance_in_series Destructive

delete_instance_in_series
delete_instance_in_study Destructive

delete_instance_in_study
delete_patient_studies Destructive

delete_patient_studies
delete_resource Destructive

delete_resource
delete_role_policy Destructive

delete_role_policy
delete_schedule Destructive

delete_schedule
delete_series_by_uid Destructive

delete_series_by_uid
delete_study Destructive

delete_study
delete_user Destructive

delete_user
delete_user_policy Destructive

delete_user_policy
delete-cache-cluster Destructive

delete-cache-cluster
delete-replication-group Destructive

delete-replication-group
delete-serverless-cache Destructive

delete-serverless-cache
DeleteAHOBatch Destructive

DeleteAHOBatch
DeleteAHOConfiguration Destructive

DeleteAHOConfiguration
DeleteAHORunBatch Destructive

DeleteAHORunBatch
DeleteDbCluster Destructive

Deletes a Timestream for InfluxDB cluster by the db_cluster_id
DeleteDbInstance Destructive

Deletes a Timestream for InfluxDB DB instance by the instance-identifier
dropCollection Destructive

dropCollection
gateway_delete Destructive

gateway_delete
gateway_resource_policy_delete Destructive

gateway_resource_policy_delete
gateway_target_delete Destructive

gateway_target_delete
identity_delete_api_key_provider Destructive

identity_delete_api_key_provider
identity_delete_oauth2_provider Destructive

identity_delete_oauth2_provider
identity_delete_resource_policy Destructive

identity_delete_resource_policy
identity_delete_workload_identity Destructive

identity_delete_workload_identity
json_clear Destructive

Clear container at path (array or object).
json_del Destructive

Delete value at path.
memory_batch_delete_records Destructive

memory_batch_delete_records
memory_delete Destructive

memory_delete
memory_delete_event Destructive

memory_delete_event
memory_delete_record Destructive

memory_delete_record
policy_delete Destructive

policy_delete
policy_engine_delete Destructive

policy_engine_delete
remove_instance_from_image_set Destructive

remove_instance_from_image_set
remove_series_from_image_set Destructive

remove_series_from_image_set
remove_user_from_group Destructive

remove_user_from_group
stream_delete Destructive

Delete entries from stream.
stream_group_delete_consumer Destructive

Delete consumer from group.
stream_group_destroy Destructive

Destroy consumer group.
cache_flush_all Destructive

Flush all cache entries.
detach_group_policy Destructive

detach_group_policy
detach_user_policy Destructive

detach_user_policy
json_arrpop Destructive

Pop a value from the array at path and index.
list_pop_left Destructive

Pop value(s) from left of list.
list_pop_right Destructive

Pop value(s) from right of list.
list_trim Destructive

Trim list to specified range.
stream_trim Destructive

Trim stream to specified length.
sorted_set_popmax Destructive

Remove and return members with highest scores.
sorted_set_popmin Destructive

Remove and return members with lowest scores.
sorted_set_remove_by_rank Destructive

Remove members by rank range.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Prometheus MCP Server

Tools at critical risk

Attacks that target this class

More on Prometheus MCP Server

Enforce policy on every Prometheus MCP Server tool call.