Critical-risk tools in Directus MCP Server
13 of the 56 tools in Directus MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bulk_delete_itemsDestructiveDelete multiple items from a collection at once by their IDs. This action cannot be undone. Example: {collection:
-
delete_collectionDestructiveDelete a collection and all its data. This action cannot be undone. Use with caution.
-
delete_dashboardDestructiveDelete a dashboard from Directus by ID. This action cannot be undone.
-
delete_dashboardsDestructiveDelete multiple dashboards from Directus at once by their IDs. This action cannot be undone. Example: {ids: [
-
delete_fieldDestructiveRemove a field from a collection. This will delete the column and all its data. Use with caution.
-
delete_flowDestructiveDelete a flow from Directus by ID. This action cannot be undone.
-
delete_flowsDestructiveDelete multiple flows from Directus at once by their IDs. This action cannot be undone. Example: {ids: [
-
delete_itemDestructiveDelete an item from a collection by ID. This action cannot be undone.
-
delete_operationDestructiveDelete an operation from Directus by ID. This action cannot be undone.
-
delete_operationsDestructiveDelete multiple operations from Directus at once by their IDs. This action cannot be undone. Example: {ids: [
-
delete_panelDestructiveDelete a panel from Directus by ID. This action cannot be undone.
-
delete_panelsDestructiveDelete multiple panels from Directus at once by their IDs. This action cannot be undone. Example: {ids: [
-
delete_relationDestructiveDelete a relation. Specify the collection and field that contains the relation.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.