Critical-risk tools in Google

Critical severity Google MCP Server 9 of 60 tools

9 of the 60 tools in Google are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete_comment Destructive

Delete a comment from a Google Drive file.
delete_doc_tab Destructive

Delete a tab from a Google Doc.
delete_footer Destructive

Delete a footer from a Google Doc.
delete_header Destructive

Delete a header from a Google Doc.
delete_named_range Destructive

Delete a named range from a Google Doc by name or ID.
delete_permission Destructive

Remove a permission from a Google Drive file.
delete_positioned_object Destructive

Delete a positioned object (e.g. floating image) from a Google Doc.
delete_reply Destructive

Delete a reply from a comment.
trash_file Destructive

Move a Google Drive file or folder to trash (or permanently delete it). Use search_drive first to find the file ID.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Google

Tools at critical risk

Attacks that target this class

More on Google

Enforce policy on every Google tool call.