Critical-risk tools in Vibecontrols
89 of the 672 tools in Vibecontrols are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
vibecontrols_actions_cancel_executionDestructiveCancel a running Vibe Action execution.
-
vibecontrols_actions_deleteDestructivePermanently delete a Vibe Action.
-
vibecontrols_actions_unscheduleDestructiveDelete a scheduled job for a Vibe Action.
-
vibecontrols_agents_deleteDestructivePermanently delete a VibeControls agent.
-
vibecontrols_agents_remove_pluginDestructiveRemove a plugin from a specific agent.
-
vibecontrols_ai_prompts_deleteDestructiveDelete an AI prompt.
-
vibecontrols_audit_deleteDestructiveDelete an audit log entry.
-
vibecontrols_auth_api_keys_revokeDestructiveRevoke an API key by its keyId.
-
vibecontrols_auth_apps_deactivateDestructiveDeactivate an app by its id (revoke is not currently a separate mutation).
-
vibecontrols_auth_delegations_revokeDestructiveRevoke a delegation by its id.
-
vibecontrols_auth_logoutDestructiveLog out and clear all stored authentication tokens.
-
vibecontrols_auth_reset_password_get_urlDestructiveBuild the password reset URL (browser-only flow). Returns the URL to open in a browser; this tool does not perform any server call.
-
vibecontrols_auth_sessions_revokeDestructiveRevoke (sign out) a single session by id.
-
vibecontrols_auth_sso_deleteDestructiveDelete SSO configuration for a tenant.
-
vibecontrols_billing_payment_methods_removeDestructiveDelete a payment method by ID.
-
vibecontrols_billing_subscriptions_cancelDestructiveCancel a subscription with an optional reason.
-
vibecontrols_catalogs_deleteDestructiveSoft-delete a catalog. Returns { deleted: boolean, catalogId: string }.
-
vibecontrols_catalogs_remove_componentDestructiveRemove a component from a catalog. Returns { removed: boolean }.
-
vibecontrols_catalogs_remove_vibeDestructiveRemove a vibe from a catalog. Returns { removed: boolean }.
-
vibecontrols_channels_connections_deleteDestructiveDelete a channel connection by ID.
-
vibecontrols_channels_deleteDestructiveDelete a channel by ID.
-
vibecontrols_components_deleteDestructiveSoft-delete a component. Returns { deleted, componentId }.
-
vibecontrols_config_deleteDestructiveDelete a configuration by key and scope.
-
vibecontrols_configuration_gitops_deleteDestructiveDelete a GitOps provider connection.
-
vibecontrols_configuration_security_cancel_scanDestructiveCancel an in-flight security scan run.
-
vibecontrols_configuration_security_revoke_exceptionDestructiveRevoke a previously-granted security exception.
-
vibecontrols_configuration_settings_delete_secretDestructiveDelete a settings secret by key.
-
vibecontrols_configuration_settings_resetDestructiveReset a settings category to its workspace defaults.
-
vibecontrols_conversations_deleteDestructiveDelete a conversation by ID.
-
vibecontrols_conversations_drafts_deleteDestructiveDelete the current actor’s draft for a conversation.
-
vibecontrols_conversations_messages_deleteDestructiveSoft-delete (default) or hard-delete a message.
-
vibecontrols_conversations_messages_unpinDestructiveRemove a pinned message from its conversation.
-
vibecontrols_conversations_participants_removeDestructiveRemove a user from a conversation.
-
vibecontrols_conversations_reactions_removeDestructiveRemove the current actor’s emoji reaction from a message.
-
vibecontrols_decks_buttons_deleteDestructivePermanently delete a VibeDeck button.
-
vibecontrols_decks_deleteDestructivePermanently delete a VibeDeck.
-
vibecontrols_devportal_api_keys_revokeDestructiveRevoke an API key via `revokeAPIKey(keyId: String!)` (live global mutation, returns Boolean!).
-
vibecontrols_devportal_apps_deleteDestructiveDelete a devportal application. Live mutation returns Boolean! (no selection set).
-
vibecontrols_devportal_apps_webhooks_removeDestructiveRemove a webhook by ID. Live mutation returns Boolean! (no selection set).
-
vibecontrols_devportal_delegations_revokeDestructiveRevoke a workspace delegation via `revokeDelegation(id: ID!)` (live schema, returns Boolean!; no selection set).
-
vibecontrols_devportal_oauth_deleteDestructiveDelete an OAuth 2.0 client by ID. [intentionally stubbed: `Mutation.deleteOAuthClient` has been removed from the alpha supergraph (no successor field). Use `_auth_*` surface for...
-
vibecontrols_devportal_orgs_deleteDestructiveDelete a developer organization.
-
vibecontrols_files_revokeDestructiveRevoke an existing file share by ID (mirrors SDK files.shareApi.revoke). [STUB]
-
vibecontrols_files_share_revokeDestructiveRevoke a previously created file share by ID. [STUB]
-
vibecontrols_groups_deleteDestructiveDelete a group. Use archive=true for a soft delete (status change only).
-
vibecontrols_groups_members_removeDestructiveRemove one or more members from a group by membership ID.
-
vibecontrols_integrations_connections_deleteDestructiveDelete a connection. Use keepSecret=true to retain the vault secret.
-
vibecontrols_integrations_connections_revokeDestructiveRevoke a connection — invalidates tokens and marks as REVOKED.
-
vibecontrols_integrations_tags_removeDestructiveRemove a tag assignment from a connection.
-
vibecontrols_notes_deleteDestructiveDelete a note.
-
vibecontrols_organizations_members_removeDestructiveRemove a user from an organization. Returns { removed: boolean, organizationId, userId }.
-
vibecontrols_products_content_pages_deleteDestructiveDelete a content page.
-
vibecontrols_products_deleteDestructiveDelete a platform product.
-
vibecontrols_products_feature_flags_deleteDestructiveDelete a feature flag.
-
vibecontrols_products_shortcuts_deleteDestructiveDelete a keyboard shortcut.
-
vibecontrols_rbac_roles_deleteDestructiveDelete a role, optionally reassigning actors to another role.
-
vibecontrols_sandbox_deleteDestructiveDelete a sandbox. [STUB]
-
vibecontrols_sandbox_templates_deleteDestructiveDelete a sandbox template. [STUB]
-
vibecontrols_sandboxes_deleteDestructiveDelete a sandbox by ID.
-
vibecontrols_sandboxes_tags_detachDestructiveRemove a tag from a sandbox.
-
vibecontrols_sandboxes_templates_deleteDestructiveDelete a sandbox template config by ID.
-
vibecontrols_scheduler_jobs_deleteDestructiveDelete a scheduled job.
-
vibecontrols_scheduler_jobs_tag_removeDestructiveRemove a tag assignment from a scheduled job.
-
vibecontrols_scheduler_templates_deleteDestructiveDelete a schedule template.
-
vibecontrols_scorecards_remove_metricDestructiveSoft-delete a scorecard metric. Returns { removed: boolean, metricId }.
-
vibecontrols_security_secrets_deleteDestructiveDelete a secret by ID.
-
vibecontrols_security_vaults_deleteDestructiveDelete a vault. Set archive=true to soft-archive instead of permanently deleting.
-
vibecontrols_sessions_deleteDestructivePermanently delete a terminal session. Distinct from terminate — this also removes the session record. Returns { deleted, sessionId }.
-
vibecontrols_sessions_share_link_revokeDestructiveRevoke a session share link.
-
vibecontrols_sessions_share_revokeDestructiveRevoke a session share.
-
vibecontrols_store_cart_clearDestructiveClear the cart. [STUB]
-
vibecontrols_store_cart_removeDestructiveRemove a product from the cart. [STUB]
-
vibecontrols_store_installed_uninstallDestructiveUninstall a product. [STUB]
-
vibecontrols_tags_deleteDestructiveDelete a tag by ID. [STUB]
-
vibecontrols_tags_permissions_revokeDestructiveRevoke a tag permission. [STUB]
-
vibecontrols_targets_deleteDestructivePermanently delete a VibeControls target.
-
vibecontrols_templates_deleteDestructiveSoft-delete a template. Returns { deleted, templateId }.
-
vibecontrols_tours_progress_resetDestructiveReset tour progress for the given user (defaults to the current actor).
-
vibecontrols_tunnels_deleteDestructiveSoft-delete a tunnel (stops it first if active).
-
vibecontrols_tunnels_delete_domainDestructivePermanently delete a tunnel domain record.
-
vibecontrols_tunnels_revoke_sessionDestructiveRevoke an active session (kills the live connection).
-
vibecontrols_ui_session_clearDestructiveClear the current user's UI session state.
-
vibecontrols_vibe_deck_share_links_revokeDestructiveRevoke a VibeDeck share-link.
-
vibecontrols_vibes_deleteDestructivePermanently delete a vibe.
-
vibecontrols_webhooks_deleteDestructiveDelete a webhook.
-
vibecontrols_workspace_deleteDestructiveDelete a workspace by its ID (global layer).
-
vibecontrols_workspace_members_removeDestructiveRemove a workspace member. Live alpha: `removeWorkspaceMember(id: ID!)` (workspaces endpoint, membership id). Get the id from `workspace_members_list` first.
-
vibecontrols_billing_credits_withdrawFinancialRequest a credit withdrawal to a payout account.
-
vibecontrols_sessions_transfer_controlFinancialTransfer control of a shared session to another collaborator.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.