Critical-risk tools in JSR MCP

Critical severity JSR MCP MCP Server 4 of 40 tools

4 of the 40 tools in JSR MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

jsr_delete_package Destructive

Delete a package (requires authentication and scope admin, package must have no versions).
jsr_delete_scope Destructive

Delete a scope (requires authentication and scope admin, scope must have no packages).
jsr_delete_scope_invite Destructive

Delete a scope invite (requires authentication and scope admin).
jsr_remove_scope_member Destructive

Remove a member from a scope (requires authentication and scope admin).

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in JSR MCP

Tools at critical risk

Attacks that target this class

More on JSR MCP

Enforce policy on every JSR MCP tool call.