Critical-risk tools in Events

Critical severity Events MCP Server 2 of 18 tools

2 of the 18 tools in Events are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_event_preferences Destructive

Use this only when a user asks to delete their UPlayground saved event preferences and feedback history.
purchase_ticket_order Financial

Use this when the user has given explicit written confirmation for a locked ticket quote and the agent should either execute an integrated provider purchase or return the requir...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Events

Tools at critical risk

Attacks that target this class

More on Events

Enforce policy on every Events tool call.