Critical-risk tools in Google

Critical severity Google MCP Server 4 of 64 tools

4 of the 64 tools in Google are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

calendar_delete_calendar Destructive

Delete a calendar
cancel_operation Destructive

❌ Cancel any pending operation (email, file share, calendar event, bulk operation)
gmail_delete_message Destructive

Delete a Gmail message (move to trash)
google_auth_revoke Destructive

Revoke Google authentication and clear stored credentials

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Google

Tools at critical risk

Attacks that target this class

More on Google

Enforce policy on every Google tool call.