Critical-risk tools in Smokeball

Critical severity Smokeball MCP Server 29 of 189 tools

29 of the 189 tools in Smokeball are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_activity_code Destructive

Delete an activity code by ID.
delete_authorization_group Destructive

Delete an authorization group by ID.
delete_contact Destructive

Delete a contact by ID.
delete_contact_relation Destructive

Delete a relationship from a contact.
delete_event Destructive

Delete a calendar event by ID.
delete_event_reminder Destructive

Delete an event reminder.
delete_expense Destructive

Delete an expense entry by ID.
delete_fee Destructive

Delete a fee entry by ID.
delete_file Destructive

Delete a file by ID.
delete_firm_user_mapping Destructive

Delete a firm user mapping by ID.
delete_folder Destructive

Delete a folder by ID.
delete_lead Destructive

Delete a lead by ID.
delete_matter Destructive

Delete a matter by ID.
delete_memo Destructive

Delete a memo by ID.
delete_plugin Destructive

Delete a plugin by ID.
delete_staff_member Destructive

Delete a staff member by ID.
delete_subtask Destructive

Delete a subtask.
delete_task Destructive

Delete a task by ID.
delete_task_document Destructive

Remove a document attachment from a task.
delete_webhook_subscription Destructive

Delete a webhook subscription by ID.
remove_contact_tags Destructive

Remove a tag from a contact. tag_id: the ID of the tag to remove.
remove_layout_from_matter Destructive

Remove a layout instance from a matter.
remove_relationship_from_role Destructive

Remove a contact relationship from a role on a matter.
remove_role_from_matter Destructive

Remove a role from a matter.
remove_user Destructive

Remove a user from the firm.
create_requisition Financial

Create a trust fund requisition (draw-down request).
create_transaction Financial

Create a bank account transaction. amount: positive for deposit, negative for withdrawal.
protect_funds Financial

Protect (reserve) funds in a trust account for a matter.
unprotect_funds Financial

Release protected (reserved) funds back to available balance.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Smokeball

Tools at critical risk

Attacks that target this class

More on Smokeball

Enforce policy on every Smokeball tool call.