Critical-risk tools in Codex Chats

Critical severity Codex Chats MCP Server 5 of 17 tools

5 of the 17 tools in Codex Chats are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_all_archived Destructive

delete_all_archived
delete_all_conversations Destructive

Permanently delete EVERY regular ChatGPT conversation. Requires confirm=True.
delete_chat Destructive

Permanently delete a Codex Cloud chat by ID.
delete_conversation Destructive

Permanently delete a regular ChatGPT conversation by ID.
delete_conversations_matching Destructive

Delete every conversation whose title contains `query`. Requires confirm=True.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Codex Chats

Tools at critical risk

Attacks that target this class

More on Codex Chats

Enforce policy on every Codex Chats tool call.