Critical-risk tools in InDesign UXP MCP Server

Critical severity InDesign UXP MCP Server MCP Server 8 of 135 tools

8 of the 135 tools in InDesign UXP MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cleanup_document Destructive

Clean up document (remove unused elements)
clear_session Destructive

Clear all session data including page dimensions and document information
delete_all_page_layout_snapshots Destructive

Delete all layout snapshots for a page
delete_master_spread Destructive

Delete a master spread
delete_page Destructive

Delete a page from the document
delete_page_item Destructive

Delete a page item
delete_page_layout_snapshot Destructive

Delete the layout snapshot for a page
delete_spread Destructive

Delete a spread

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in InDesign UXP MCP Server

Tools at critical risk

Attacks that target this class

More on InDesign UXP MCP Server

Enforce policy on every InDesign UXP MCP Server tool call.