Critical-risk tools in Todoist

Critical severity Todoist MCP Server 6 of 33 tools

6 of the 33 tools in Todoist are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_comment Destructive

Delete a comment
delete_label Destructive

Delete a label
delete_project Destructive

Delete a project and all its tasks
delete_reminder Destructive

Delete a reminder
delete_section Destructive

Delete a section and all its tasks
delete_task Destructive

Permanently delete a task

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Todoist

Tools at critical risk

Attacks that target this class

More on Todoist

Enforce policy on every Todoist tool call.