Critical-risk tools in Gcalendar

Critical severity Gcalendar MCP Server 6 of 22 tools

6 of the 22 tools in Gcalendar are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

clear_calendar Destructive

Delete all events from a calendar.
delete_acl_rule Destructive

Remove calendar sharing.
delete_calendar Destructive

Delete a calendar.
delete_event Destructive

Delete an event.
reauth Destructive

Delete stored tokens and generate new auth URL for re-authentication.
revoke_auth Destructive

Revoke tokens with Google and delete local tokens, then get new auth URL.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Gcalendar

Tools at critical risk

Attacks that target this class

More on Gcalendar

Enforce policy on every Gcalendar tool call.