Critical-risk tools in Elementify MCP
18 of the 269 tools in Elementify MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
clean_databaseDestructiveClean database bloat: revisions, expired transients, spam comments. L2 governance: auto-queues changes.
-
cleanup_draftsDestructiveClean up old draft data to free up storage.
-
delete_amelia_appointmentDestructiveDelete an Amelia appointment.
-
delete_amelia_serviceDestructiveDelete an Amelia service.
-
delete_mediaDestructiveDelete a media attachment (move to trash or permanently delete with force=true).
-
delete_menuDestructiveDelete a navigation menu by ID. Note: This will also delete all menu items in the menu.
-
delete_menu_itemDestructiveDelete a menu item by ID.
-
delete_postDestructiveDelete a post (move to trash or permanently delete).
-
delete_productDestructiveMove product to trash or permanently delete.
-
delete_templateDestructivePermanently delete an Elementor template from the library.
-
delete_termDestructiveDelete a term from a taxonomy.
-
manage_product_categoryDestructiveCreate, update, or delete a product category.
-
queue_cleanupDestructiveClean up old changes based on retention policy (approved: 30 days, rejected: 7 days, applied: 90 days).
-
refresh_stagingDestructiveRefresh staging environment with latest production data.
-
remove_widgetDestructiveRemove a widget by its element ID from a page. Requires the page content_hash. Use dry_run=true to preview what would be removed.
-
review_changeDestructiveApprove or reject a queued change. Approving marks it as ready to execute — use apply_change afterward. Rejecting discards it permanently.
-
site_protectDestructiveProtect specific pages or templates from being modified by any agent tool. Sets an enforced rule in site memory — the plugin will refuse writes (HTTP 423) to protected content. ...
-
site_unprotectDestructiveRemove a protection rule set by site_protect. The specified pages/templates become editable again. Use site_protected to see which keys are currently active.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.