Critical-risk tools in Truenas Ws

Critical severity Truenas Ws MCP Server 7 of 59 tools

7 of the 59 tools in Truenas Ws are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_app Destructive

Delete an installed app. Requires confirm=True.
delete_dataset Destructive

Delete a dataset. Requires confirm=True.
delete_nfs_export Destructive

Delete an NFS export by ID. Requires confirm=True.
delete_smb_share Destructive

Delete an SMB share by ID. Requires confirm=True.
delete_snapshot Destructive

Delete a snapshot. Requires confirm=True. Snapshot format: dataset@name.
delete_user Destructive

Delete a user. Requires confirm=True.
rollback_snapshot Destructive

Rollback dataset to snapshot. Requires confirm=True. WARNING: destroys newer data.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Truenas Ws

Tools at critical risk

Attacks that target this class

More on Truenas Ws

Enforce policy on every Truenas Ws tool call.