Critical-risk tools in Defined

Critical severity Defined MCP Server 7 of 38 tools

7 of the 38 tools in Defined are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_host Destructive

Delete a host.
delete_role Destructive

Delete a role.
delete_route Destructive

Delete a route.
delete_tag Destructive

Delete a tag.
remove_firewall_rule Destructive

Remove a firewall rule from a role by its index. Use get_role to see current rules.
remove_route_firewall_rule Destructive

Remove a firewall rule from a route by index. Use get_route to see current rules.
remove_tag_config_override Destructive

Remove a config override from a tag by key.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Defined

Tools at critical risk

Attacks that target this class

More on Defined

Enforce policy on every Defined tool call.