Critical-risk tools in Wpm Mcp Server
43 of the 420 tools in Wpm Mcp Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_all_meterreadings_rentals_summaryDestructiveDelete meter reading details for a property for a given date.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_all_units_rentals_listingDestructiveDeleting a listing will immediately remove it from your Buildium public website. The listing will also be removed\r\nfrom any syndicated sites within 24-48 hours.\r\n\r\nListing...
-
delete_associations_appliancesDestructiveDeletes an associations appliance.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_associations_boardmembersDestructiveDeletes a board member. Note, this is a hard delete from the database and data can not be restored. \r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_bills_filesDestructiveDeletes the specified file from a bill. The file will be permanently deleted from the Buildium platform and can not be recovered.\r\n \r\n\r\n<h4>Required permission(...
-
delete_checks_bankaccounts_filesDestructiveDeletes a file for a check\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_history_tasks_filesDestructiveDeletes a specific file from a task history record. The file will be permanently deleted from the Buildium platform an can not be recovered.\r\n \r\n\r\nThis endpoint...
-
delete_leases_moveoutsDestructiveDeletes move out data for a tenant on a given lease.\r\n \r\n\r\n<h4>Required Permission(s):</h4><span class=
-
delete_meterreadings_associations_summaryDestructiveDelete meter reading details for an association for a given date.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_rentals_appliancesDestructiveDeletes an appliance.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_rentals_imagesDestructiveDeletes a rental property image.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
delete_units_rentals_imagesDestructiveDeletes a unit image.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
inactivate_associationsDestructiveInactivates an association along with associated units and ownership accounts. \r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
inactivate_rentalsDestructiveInactivates a rental property and all associated units. Any associated property\
-
auto_payments_associations_ownershipaccountsFinancialCreates a payment on the ownership account ledger. Note that the recorded payment will be automatically allocated to the general ledger accounts based on the payment allocation ...
-
create_applications_chargesFinancialCreates a charge on a specific application ledger.\r\n\r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_applications_paymentsFinancialCreates an application ledger payment.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_applications_refundsFinancialCreates a refund for a specific application.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_auto_pay_applicationsFinancialCreates a payment on the application ledger. Note that the recorded payment will be automatically allocated to the general ledger accounts based on the payment allocation settin...
-
create_auto_payment_leasesFinancialCreates a payment on the lease ledger. Note that the recorded payment will be automatically allocated to the general ledger accounts based on the payment allocation settings. Th...
-
create_bankaccounts_depositsFinancialCreates a deposit.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_bankaccounts_quickdepositsFinancialCreates a quick deposit.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_bankaccounts_transfersFinancialCreates a bank account transfer.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_bankaccounts_withdrawalsFinancialCreates a bank account withdrawal.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_bills_paymentsFinancialCreates a bill payment.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_leases_applieddepositsFinancialWithholds a resident deposit by reallocating the funds from a liability account to an income account to cover an expense(s).\r\n \r\n\r\n<h4>Required permission(s):</h...
-
create_leases_chargesFinancialCreates a charge transaction on a specific lease ledger.\r\n\r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_leases_paymentsFinancialCreates a lease ledger payment.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_leases_recurringpaymentsFinancialCreates a recurring payment that will post automatically on the specified lease ledger.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_leases_refundsFinancialCreates a refund.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_multiple_bills_paymentsFinancialCreates a payment for multiple bills with one check.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_ownershipaccounts_associations_applieddepositsFinancialWithholds an association owner deposit by reallocating the funds from a liability account to an income account to cover an expense(s).\r\n \r\n\r\n<h4>Required permis...
-
create_ownershipaccounts_associations_paymentsFinancialCreates a ledger payment.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_ownershipaccounts_associations_recurringchargesFinancialCreates a recurring charge transaction that will post automatically on the specified ownership account ledger.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_ownershipaccounts_associations_recurringcreditsFinancialCreates a recurring credit transaction that will post automatically on the specified ownership account ledger.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_ownershipaccounts_associations_recurringpaymentsFinancialCreates a recurring payment that will post automatically on the specified ownership account ledger.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_ownershipaccounts_associations_refundsFinancialCreates a refund.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_pay_reversal_applicationsFinancialReverses an application ledger payment. Note, this action can only be taken on a payment that has been deposited. \r\n \r\n\r\n<h4>Required permission(s):</h4><span c...
-
create_pay_reversal_leasesFinancialReverses a lease ledger payment. Note, this action can only be taken on a payment that has been deposited. \r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_vendors_creditsFinancialCreates a credit.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
create_vendors_refundsFinancialCreates a refund.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
credits_associations_ownershipaccountsFinancialCreates a ledger credit.\r\n \r\n\r\n<h4>Required permission(s):</h4><span class=
-
finalize_bankaccounts_reconciliationsFinancialFinalizes a manual reconciliation. Reconciliations can only be finalized for bank accounts that are not linked externally.\r\n \r\n\r\n<h4>Required permission(s):</h4...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.