Critical-risk tools in Sanka MCP Server
52 of the 349 tools in Sanka MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_buy_requestDestructiveCancel a Sanka Buy request before downstream purchasing is complete.
-
cancel_export_jobDestructiveCancel a running export job.
-
cancel_import_jobDestructiveCancel a running import job.
-
cancel_workspace_invitationDestructiveCancel one pending invitation in an explicitly verified Sanka workspace. Call current_workspace immediately before this tool and pass its internal workspace_id as expected_works...
-
delete_absenceDestructiveArchive/delete an absence record in Sanka.
-
delete_approval_ruleDestructiveDelete one approval rule for the specified object.
-
delete_associationDestructiveDelete an association between two Sanka records. Prefer association_id; otherwise pass source_object/source_id, target_object/target_id, and label_id or label.
-
delete_attendance_recordDestructiveArchive/delete an employee attendance record in Sanka.
-
delete_billDestructiveDelete a bill in Sanka by bill id or external reference.
-
delete_companyDestructiveArchive or delete a company. Default target=sanka archives in Sanka only. Use target=integration with provider=salesforce to delete a Salesforce record by external_id, or provid...
-
delete_contactDestructiveArchive or delete a contact in Sanka or a connected CRM by contact id or external reference.
-
delete_dealDestructiveArchive or delete a deal in Sanka or a connected CRM by case id, numeric id, or external reference.
-
delete_delivery_ruleDestructiveDelete one invoice delivery rule for the specified object.
-
delete_disbursementDestructiveDelete a disbursement in Sanka by disbursement id or external reference.
-
delete_disbursement_allocationDestructiveArchive/delete one bill or expense payable allocation row from a disbursement.
-
delete_estimateDestructiveDelete an estimate in Sanka by estimate id or external reference.
-
delete_expenseDestructiveDelete an expense in Sanka by expense id, PM id, or external reference.
-
delete_ferry_diagramDestructivePermanently delete a saved Sanka diagram by UUID.
-
delete_ferry_todoDestructivePermanently delete one Todo from a Sanka migration program.
-
delete_inventoryDestructiveDelete an inventory in Sanka by inventory id or external reference.
-
delete_inventory_transactionDestructiveDelete an inventory transaction in Sanka.
-
delete_invoiceDestructiveArchive an invoice in Sanka by invoice id or external reference. This is a soft delete; use permanent_delete_invoice only after explicit confirmation.
-
delete_itemDestructiveArchive or delete an item in Sanka by item id or external reference.
-
delete_locationDestructiveDelete a location in Sanka by location id or external reference.
-
delete_lock_ruleDestructiveDelete one record lock rule for the specified object.
-
delete_orderDestructiveArchive an order in Sanka by order id, numeric id, or external reference. This is a soft delete; use permanent_delete_order only after explicit confirmation.
-
delete_paymentDestructiveDelete a payment in Sanka by payment id or external reference.
-
delete_projectDestructiveDelete a task project in Sanka. Projects with linked tasks are rejected unless replacement_project_id or clear_task_project is provided.
-
delete_propertyDestructiveDelete a custom property in Sanka or a connected CRM for the specified object family. When provider is supplied, the MCP never performs a Sanka-only mutation; omit provider for ...
-
delete_purchase_orderDestructiveDelete a purchase order in Sanka by purchase order id or external reference.
-
delete_reportDestructiveDelete one Sanka report/dashboard.
-
delete_sandboxDestructivePERMANENTLY delete the sandbox workspace and everything in it. Production is never affected. Requires confirm=true after explicit user approval.
-
delete_slipDestructiveDelete a slip in Sanka by slip id or external reference.
-
delete_subscriptionDestructiveDelete a subscription in Sanka by subscription id or external reference.
-
delete_taskDestructiveArchive or delete a task in Sanka by task id or external reference.
-
delete_ticketDestructiveArchive or delete a ticket in Sanka by ticket id, numeric id, or external reference.
-
delete_viewDestructiveDelete a saved Sanka view for any supported object.
-
merge_recordsDestructiveApply a confirmed Sanka-native merge for duplicate companies or contacts. Call preview_record_merge first, then call this only after the user explicitly approves the merge plan....
-
mutate_object_schemaDestructiveCreate, update, or delete a Sanka custom object schema through routed arguments. Integration schema mutation is a V2 backend gap and will be rejected by the API.
-
permanent_delete_invoiceDestructivePermanently delete an already archived invoice in Sanka. Requires confirm=true and cannot be undone.
-
permanent_delete_orderDestructivePermanently delete an already archived order in Sanka. Requires confirm=true and cannot be undone.
-
refresh_sandboxDestructiveReplace everything in the sandbox with a fresh copy of current production configuration. PERMANENTLY DISCARDS all sandbox changes and copied data; the sandbox keeps its workspac...
-
review_convoy_invoice_requestDestructiveApprove, reject, cancel, or mark a Convoy invoice request paid. Requires explicit approval with confirm=true. Marking paid records evidence only; it does not execute a bank tran...
-
revoke_convoy_partner_memberDestructiveRevoke a partner member invitation and portal access after explicit approval.
-
approve_payroll_runFinancialApprove a calculated payroll run in Sanka after the user explicitly confirms approval.
-
calculate_convoy_commissionsFinancialPreview monthly Convoy commissions by default. Set dry_run=false only after explicit approval to store draft commissions.
-
create_disbursementFinancialCreate a disbursement in Sanka.
-
create_paymentFinancialCreate a payment in Sanka.
-
create_payroll_journal_entryFinancialCreate or reuse one monthly Sanka Journal Entry from a payroll run. Use after calculate_payroll_run when the user wants payroll posted to accounting.
-
create_subscriptionFinancialCreate a subscription in Sanka from explicit customer and subscription item data. For CRM deal/opportunity-sourced subscriptions, use deal_to_order first and create subscription...
-
select_buy_offerFinancialSelect one immutable offer snapshot per Buy request line. Multi-line and multi-merchant requests must pass line_selections so downstream merchant purchases can be split correctl...
-
update_paymentFinancialUpdate an existing payment in Sanka.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.