Critical-risk tools in InvGate Service Desk

Critical severity InvGate Service Desk MCP Server 5 of 96 tools

5 of the 96 tools in InvGate Service Desk are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_incident Destructive

Cancel a request.
cancel_incident_approval Destructive

Cancel an approval.
delete_incident_custom_field Destructive

Delete the value of a custom field on a request.
delete_kb_article Destructive

Delete a Knowledge Base article by ID.
delete_time_entry Destructive

Delete a time tracking entry from a request.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in InvGate Service Desk

Tools at critical risk

Attacks that target this class

More on InvGate Service Desk

Enforce policy on every InvGate Service Desk tool call.