Critical-risk tools in Docx

Critical severity Docx MCP Server 20 of 219 tools

20 of the 219 tools in Docx are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_column_from_table Destructive

Delete a column (0-based) from every row of a table.
delete_comment Destructive

Delete a comment and remove its range markers from the document.
delete_content_control Destructive

Remove an SDT content control wrapper, keeping its content in place.
delete_custom_property Destructive

Delete a custom document property by name.
delete_endnote Destructive

Delete an endnote and its in-body reference.
delete_field Destructive

Remove a complete complex field (begin through end runs) from the document.
delete_footer Destructive

Delete a footer by location: default, first, or even.
delete_footnote Destructive

Delete a footnote and its in-body reference.
delete_header Destructive

Delete a header by location: default, first, or even.
delete_image Destructive

Remove the drawing containing the image with the given rId from the document.
delete_paragraph Destructive

Delete the paragraph with the given paraId.
delete_section_break Destructive

delete_section_break
delete_style Destructive

Delete a style from the document.
delete_table Destructive

Delete a table by index (0-based). Raises IndexError if out of range.
delete_table_row Destructive

Delete a table row with tracked changes.
delete_text Destructive

delete_text
flatten_document Destructive

Accept all tracked changes and remove all revision markup.
remove_bookmark Destructive

Remove a bookmark by name (keeps paragraph content).
remove_watermark Destructive

Remove VML watermarks (e.g., DRAFT) from all document headers.
scrub_pii Destructive

scrub_pii

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Docx

Tools at critical risk

Attacks that target this class

More on Docx

Enforce policy on every Docx tool call.