Critical-risk tools in N8n

Critical severity N8n MCP Server 5 of 43 tools

5 of the 43 tools in N8n are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_credential Destructive

Delete a credential. Requires write_mode.
delete_execution Destructive

Delete an execution from the history. Requires write_mode.
delete_tag Destructive

Delete a tag. Requires write_mode.
delete_variable Destructive

Delete an instance variable. Requires write_mode.
delete_workflow Destructive

Delete a workflow. Requires write_mode.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in N8n

Tools at critical risk

Attacks that target this class

More on N8n

Enforce policy on every N8n tool call.