Critical-risk tools in Firegex

Critical severity Firegex MCP Server 6 of 49 tools

6 of the 49 tools in Firegex are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_nfproxy_service Destructive

Delete a service and its filter code.
delete_nfregex_service Destructive

Delete a service and all its regexes.
delete_phj_service Destructive

Remove a porthijack rule permanently.
delete_regex Destructive

Permanently delete a regex.
replace_firewall_rules Destructive

Atomically replace the entire rule list.
reset_firegex Destructive

Reset Firegex's nftables state.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Firegex

Tools at critical risk

Attacks that target this class

More on Firegex

Enforce policy on every Firegex tool call.