Critical-risk tools in Sanka MCP Server
43 of the 284 tools in Sanka MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_buy_requestDestructiveCancel a Sanka Buy request before downstream purchasing is complete.
-
cancel_export_jobDestructiveCancel a running export job.
-
cancel_import_jobDestructiveCancel a running import job.
-
delete_absenceDestructiveArchive/delete an absence record in Sanka.
-
delete_approval_ruleDestructiveDelete one approval rule for the specified object.
-
delete_associationDestructiveDelete an association between two Sanka records. Prefer association_id; otherwise pass source_object/source_id, target_object/target_id, and label_id or label.
-
delete_attendance_recordDestructiveArchive/delete an employee attendance record in Sanka.
-
delete_billDestructiveDelete a bill in Sanka by bill id or external reference.
-
delete_companyDestructiveArchive or delete a company. Default target=sanka archives in Sanka only. Use target=integration with provider=salesforce to delete a Salesforce record by external_id, or provid...
-
delete_contactDestructiveArchive or delete a contact in Sanka or a connected CRM by contact id or external reference.
-
delete_dealDestructiveArchive or delete a deal in Sanka or a connected CRM by case id, numeric id, or external reference.
-
delete_delivery_ruleDestructiveDelete one invoice delivery rule for the specified object.
-
delete_disbursementDestructiveDelete a disbursement in Sanka by disbursement id or external reference.
-
delete_disbursement_allocationDestructiveArchive/delete one bill or expense payable allocation row from a disbursement.
-
delete_estimateDestructiveDelete an estimate in Sanka by estimate id or external reference.
-
delete_expenseDestructiveDelete an expense in Sanka by expense id, PM id, or external reference.
-
delete_inventoryDestructiveDelete an inventory in Sanka by inventory id or external reference.
-
delete_inventory_transactionDestructiveDelete an inventory transaction in Sanka.
-
delete_invoiceDestructiveArchive an invoice in Sanka by invoice id or external reference. This is a soft delete; use permanent_delete_invoice only after explicit confirmation.
-
delete_itemDestructiveArchive or delete an item in Sanka by item id or external reference.
-
delete_locationDestructiveDelete a location in Sanka by location id or external reference.
-
delete_lock_ruleDestructiveDelete one record lock rule for the specified object.
-
delete_orderDestructiveArchive an order in Sanka by order id, numeric id, or external reference. This is a soft delete; use permanent_delete_order only after explicit confirmation.
-
delete_paymentDestructiveDelete a payment in Sanka by payment id or external reference.
-
delete_propertyDestructiveDelete a custom property in Sanka or a connected CRM for the specified object family. When provider is supplied, the MCP never performs a Sanka-only mutation; omit provider for ...
-
delete_purchase_orderDestructiveDelete a purchase order in Sanka by purchase order id or external reference.
-
delete_reportDestructiveDelete one Sanka report/dashboard.
-
delete_slipDestructiveDelete a slip in Sanka by slip id or external reference.
-
delete_subscriptionDestructiveDelete a subscription in Sanka by subscription id or external reference.
-
delete_taskDestructiveArchive or delete a task in Sanka by task id or external reference.
-
delete_ticketDestructiveArchive or delete a ticket in Sanka by ticket id, numeric id, or external reference.
-
delete_viewDestructiveDelete a saved Sanka view for any supported object.
-
merge_recordsDestructiveApply a confirmed Sanka-native merge for duplicate companies or contacts. Call preview_record_merge first, then call this only after the user explicitly approves the merge plan....
-
mutate_object_schemaDestructiveCreate, update, or delete a Sanka custom object schema through routed arguments. Integration schema mutation is a V2 backend gap and will be rejected by the API.
-
permanent_delete_invoiceDestructivePermanently delete an already archived invoice in Sanka. Requires confirm=true and cannot be undone.
-
permanent_delete_orderDestructivePermanently delete an already archived order in Sanka. Requires confirm=true and cannot be undone.
-
approve_payroll_runFinancialApprove a calculated payroll run in Sanka after the user explicitly confirms approval.
-
create_disbursementFinancialCreate a disbursement in Sanka.
-
create_paymentFinancialCreate a payment in Sanka.
-
create_payroll_journal_entryFinancialCreate or reuse one monthly Sanka Journal Entry from a payroll run. Use after calculate_payroll_run when the user wants payroll posted to accounting.
-
create_subscriptionFinancialCreate a subscription in Sanka from explicit customer and subscription item data. For CRM deal/opportunity-sourced subscriptions, use deal_to_order first and create subscription...
-
send_invoice_emailFinancialSend or schedule an invoice PDF email from Sanka. Use action=
-
update_paymentFinancialUpdate an existing payment in Sanka.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.