Critical-risk tools in Linode MCP Server

Critical severity Linode MCP Server MCP Server 57 of 416 tools

57 of the 416 tools in Linode MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_account Destructive

Cancel your account
cancel_backups Destructive

Cancel backups for a Linode instance
cancel_object_storage Destructive

Cancel Object Storage service
delete_alert_definition Destructive

Delete an alert definition
delete_api_token Destructive

Delete an API token
delete_config_interface Destructive

Delete an interface from a configuration profile
delete_domain Destructive

Delete a domain
delete_domain_record Destructive

Delete a domain record
delete_firewall Destructive

Delete a firewall
delete_firewall_device Destructive

Delete a device from a specific firewall
delete_image Destructive

Delete an Image
delete_image_sharegroup Destructive

Delete an image share group
delete_instance Destructive

Delete a Linode instance
delete_instance_config Destructive

Delete a configuration profile for a Linode instance
delete_instance_disk Destructive

Delete a disk for a Linode instance
delete_ipv4_address Destructive

Delete an IPv4 address from a Linode instance
delete_ipv6_range Destructive

Delete an IPv6 range
delete_kubernetes_cluster Destructive

Delete a Kubernetes cluster
delete_kubernetes_control_plane_acl Destructive

Delete the control plane ACL configuration for a Kubernetes cluster
delete_kubernetes_kubeconfig Destructive

Delete (revoke) the kubeconfig for a Kubernetes cluster
delete_kubernetes_node Destructive

Delete a node from a Kubernetes cluster
delete_kubernetes_node_pool Destructive

Delete a node pool from a Kubernetes cluster
delete_kubernetes_service_token Destructive

Delete the service token for a Kubernetes cluster
delete_linode_interface Destructive

Delete an interface from a Linode
delete_log_destination Destructive

Delete a log destination
delete_log_stream Destructive

Delete a log stream
delete_longview_client Destructive

Delete a Longview client
delete_mysql_instance Destructive

Delete a MySQL database instance
delete_nodebalancer Destructive

Delete a NodeBalancer
delete_notification_channel Destructive

Delete a notification channel
delete_oauth_client Destructive

Delete an OAuth client
delete_object Destructive

Delete an object from an Object Storage bucket
delete_object_storage_bucket Destructive

Delete an Object Storage bucket
delete_object_storage_bucket_certificate Destructive

Delete SSL/TLS certificate for an Object Storage bucket
delete_object_storage_key Destructive

Delete an Object Storage key
delete_placement_group Destructive

Delete a placement group
delete_postgresql_connection_pool Destructive

Delete a connection pool from a PostgreSQL database instance
delete_postgresql_instance Destructive

Delete a PostgreSQL database instance
delete_resource_lock Destructive

Delete a resource lock
delete_sharegroup_token Destructive

Delete a sharegroup token
delete_ssh_key Destructive

Delete an SSH key from your profile
delete_stackscript Destructive

Delete a StackScript
delete_tag Destructive

Delete a Tag
delete_user Destructive

Delete a user
delete_vlan Destructive

Delete a VLAN
delete_volume Destructive

Delete a volume
delete_vpc Destructive

Delete a VPC
delete_vpc_subnet Destructive

Delete a subnet in a VPC
remove_nodebalancer_config Destructive

remove a port configuration from a NodeBalancer
remove_nodebalancer_node Destructive

Remove a node from a NodeBalancer port config
remove_sharegroup_image Destructive

Revoke access to a shared image in a share group
remove_sharegroup_member Destructive

Revoke a membership token from a share group
revoke_authorized_app Destructive

Revoke access for an authorized OAuth app
revoke_trusted_device Destructive

Revoke trusted status for a device
rebuild_instance Destructive

Rebuild a Linode instance
regenerate_kubernetes_cluster Destructive

Regenerate a Kubernetes cluster
suspend_mysql_instance Destructive

Suspend a MySQL database instance

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Linode MCP Server

Tools at critical risk

Attacks that target this class

More on Linode MCP Server

Enforce policy on every Linode MCP Server tool call.