Critical-risk tools in Vultr MCP

Critical severity Vultr MCP MCP Server 30 of 284 tools

30 of the 284 tools in Vultr MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete Destructive

Delete a block storage volume.
delete_bare_metal_server Destructive

Delete a bare metal server.
delete_cdn_ssl_certificate Destructive

Remove SSL certificate from a CDN zone.
delete_cdn_zone Destructive

Delete a CDN zone.
delete_collection Destructive

delete_collection
delete_connection_pool Destructive

Delete a connection pool.
delete_dns_domain Destructive

Delete a DNS domain and ALL its associated records
delete_dns_record Destructive

Delete a specific DNS record
delete_domain Destructive

Delete a DNS domain and all its records.
delete_export Destructive

Delete an export from a storage gateway.
delete_forwarding_rule Destructive

delete_forwarding_rule
delete_group Destructive

Delete a firewall group.
delete_ipv4 Destructive

Delete an IPv4 address from an instance.
delete_iso Destructive

Delete an ISO image.
delete_kafka_topic Destructive

Delete a Kafka topic.
delete_kubernetes_cluster Destructive

delete_kubernetes_cluster
delete_kubernetes_cluster_with_resources Destructive

delete_kubernetes_cluster_with_resources
delete_kubernetes_node Destructive

delete_kubernetes_node
delete_kubernetes_node_pool Destructive

delete_kubernetes_node_pool
delete_logical_database Destructive

Delete a logical database.
delete_record Destructive

Delete a DNS record.
delete_rule Destructive

delete_rule
delete_serverless_inference Destructive

Delete a serverless inference subscription.
delete_ssl Destructive

delete_ssl
delete_startup_script Destructive

Delete a startup script.
delete_user Destructive

Delete a database user.
delete_vpc2 Destructive

Delete a VPC 2.0 network.
purge_cdn_zone Destructive

Purge all cached content from a CDN zone.
remove_ip_whitelist_entry Destructive

remove_ip_whitelist_entry
remove_resource_from_collection Destructive

remove_resource_from_collection

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Vultr MCP

Tools at critical risk

Attacks that target this class

More on Vultr MCP

Enforce policy on every Vultr MCP tool call.