Critical-risk tools in Hcloud

Critical severity Hcloud MCP Server 11 of 76 tools

11 of the 76 tools in Hcloud are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_firewall Destructive

Delete a firewall (must not be in use)
delete_floating_ip Destructive

Delete a floating IP (unassigns from server if attached)
delete_load_balancer Destructive

Delete a load balancer
delete_load_balancer_service Destructive

Delete a service from a load balancer
delete_network Destructive

Delete a network
delete_network_subnet Destructive

Delete a subnet from a network (detach servers from it first)
delete_placement_group Destructive

Delete a placement group
delete_primary_ip Destructive

Delete a Primary IP (unassigns from server if assigned; server must be off)
delete_server Destructive

Delete a server
delete_ssh_key Destructive

Delete an SSH key
delete_volume Destructive

Delete a volume (must be detached; all data destroyed)

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Hcloud

Tools at critical risk

Attacks that target this class

More on Hcloud

Enforce policy on every Hcloud tool call.