Critical-risk tools in Email MCP Server
23 of the 133 tools in Email MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bitrix_checklistDestructiveTask checklist management. Actions: - add: Add checklist item (requires taskId, title) - list: List checklist items (requires taskId) - update: Update item (requires taskId, che...
-
bitrix_checklist_deleteDestructiveDelete a checklist item from a task in Bitrix24
-
bitrix_comment_deleteDestructiveDelete a comment from a task in Bitrix24
-
bitrix_listDestructiveUniversal list (infoblock) management. Actions: - add: Create list (requires iblockTypeId, iblockCode, name) - get: Get list(s) (requires iblockTypeId) - update: Update list (re...
-
bitrix_list_deleteDestructiveDelete a universal list
-
bitrix_list_elementDestructiveList element management. Actions: - add: Create element (requires iblockTypeId, elementCode, name) - get: Get element(s) (requires iblockTypeId) - update: Update element (requir...
-
bitrix_list_element_deleteDestructiveDelete a list element
-
bitrix_list_fieldDestructiveList field management. Actions: - add: Create field (requires iblockTypeId, name, type) - get: Get field(s) (requires iblockTypeId) - update: Update field (requires iblockTypeId...
-
bitrix_list_field_deleteDestructiveDelete a list field
-
bitrix_list_sectionDestructiveList section management. Actions: - add: Create section (requires iblockTypeId, sectionCode, name) - get: Get section(s) (requires iblockTypeId) - update: Update section (requir...
-
bitrix_list_section_deleteDestructiveDelete a list section
-
bitrix_taskDestructiveTask management tool. Actions: - create: Create new task (requires title, responsibleId) - get: Get task by ID (requires taskId) - list: List tasks with filters - update: Update...
-
bitrix_task_deleteDestructiveDelete a task from Bitrix24
-
bitrix_timeDestructiveTask time tracking management. Actions: - add: Add time record (requires taskId, seconds) - list: List time records (requires taskId) - update: Update record (requires taskId, r...
-
bitrix_time_deleteDestructiveDelete a time tracking entry from a task in Bitrix24
-
claudecron_delete_taskDestructiveDelete a scheduled task.
-
imap_bulk_deleteDestructiveimap_bulk_delete
-
imap_bulk_delete_by_searchDestructiveimap_bulk_delete_by_search
-
imap_delete_emailDestructiveDelete an email (moves to trash or expunges).
-
imap_delete_folderDestructiveDelete a folder/mailbox. The folder must be empty.
-
imap_delete_sorting_planDestructiveDelete the sorting plan for an account.
-
imap_delete_sorting_ruleDestructiveDelete a sorting rule.
-
imap_remove_accountDestructiveRemove an email account configuration.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.