Critical-risk tools in Looker MCP Server

Critical severity Looker MCP Server MCP Server 27 of 129 tools

27 of the 129 tools in Looker MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_board Destructive

Delete a board. This action cannot be undone.
delete_board_item Destructive

Remove an item from a board section.
delete_board_section Destructive

Delete a board section and all its items.
delete_connection Destructive

delete_connection
delete_credentials_api3 Destructive

delete_credentials_api3
delete_credentials_email Destructive

delete_credentials_email
delete_credentials_oidc Destructive

delete_credentials_oidc
delete_credentials_saml Destructive

delete_credentials_saml
delete_credentials_totp Destructive

delete_credentials_totp
delete_dashboard Destructive

Delete a dashboard. This action cannot be undone.
delete_file Destructive

delete_file
delete_git_branch Destructive

delete_git_branch
delete_group Destructive

Delete a group. This action cannot be undone.
delete_look Destructive

Delete a saved Look. This action cannot be undone.
delete_model_set Destructive

Delete a model set. This action cannot be undone.
delete_permission_set Destructive

Delete a permission set. This action cannot be undone.
delete_project Destructive

delete_project
delete_role Destructive

Delete a role. This action cannot be undone.
delete_schedule Destructive

Delete a scheduled delivery plan.
delete_user Destructive

Delete a user from Looker. This action cannot be undone.
delete_user_attribute Destructive

delete_user_attribute
delete_user_attribute_user_value Destructive

delete_user_attribute_user_value
remove_group_from_group Destructive

remove_group_from_group
remove_group_user Destructive

Remove a user from a group.
reset_datagroup Destructive

reset_datagroup
reset_to_production Destructive

reset_to_production
rollback_to_production Destructive

rollback_to_production

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Looker MCP Server

Tools at critical risk

Attacks that target this class

More on Looker MCP Server

Enforce policy on every Looker MCP Server tool call.