Critical-risk tools in Zitadel MCP

Critical severity Zitadel MCP MCP Server 3 of 26 tools

3 of the 26 tools in Zitadel MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

zitadel_delete_user Destructive

Permanently delete a user. This action cannot be undone. Requires confirm: true. Consider using zitadel_deactivate_user instead (reversible).
zitadel_remove_user_grant Destructive

Remove a role grant from a user by grant ID. Requires confirm: true.
zitadel_deactivate_user Destructive

Deactivate a user account. The user will no longer be able to log in. Requires confirm: true.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Zitadel MCP

Tools at critical risk

Attacks that target this class

More on Zitadel MCP

Enforce policy on every Zitadel MCP tool call.