High-risk tools in GuildControl MCP
36 of the 258 tools in GuildControl MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
compile_component_templateExecuteCompile one typed bundled announcement, incident-status, poll-results, release-notes, or welcome-card template into the bounded static Components V2 layout DSL. Announcement and...
-
execute_announcement_crosspostExecutePublish one exact Discord announcement message after a fresh matching plan, signed interactive approval, unique one-shot operation-key reservation, pending content-free records,...
-
execute_application_emoji_changeExecuteExecute one reviewed application-owned Discord emoji create, rename, or delete after a fresh matching complete-inventory plan, signed interactive approval, a unique one-shot ope...
-
execute_application_entitlement_consumptionExecuteIrreversibly consume one reviewed exact Discord consumable entitlement only after application-specific fulfillment is independently complete, a fresh matching application, bot, ...
-
execute_application_intent_enablementExecuteEnable one reviewed policy-justified Discord application privileged intent after a fresh matching authoritative-flags plan, signed interactive approval, host write approval, an ...
-
execute_application_test_entitlement_changeExecuteCreate or delete one reviewed exact Discord test entitlement after a fresh matching application, bot, subscription-SKU, beneficiary, inventory or lifecycle plan; signed interact...
-
execute_automod_changeExecuteExecute one reviewed Discord AutoMod rule creation, disabled-rule policy update, enable-state change, or disabled-rule deletion after a fresh matching plan, signed interactive a...
-
execute_bulk_member_role_changeExecuteExecute one reviewed exact bulk member-role frontier after host write approval, signed interactive approval, a final coherent evidence match, durable coordination over the exact...
-
execute_channel_orderExecuteApply one exact reviewed relative Discord channel placement only after a fresh matching keyed plan and signed interactive approval. Durably coordinates the complete guild channe...
-
execute_channel_permission_overwriteExecuteApply one exact Discord role or member channel permission-overwrite change only after a fresh matching keyed plan and signed interactive approval. Reserves a one-shot key, recor...
-
execute_channel_permission_syncExecuteSynchronize one exact direct child channel to its exact parent category only after a fresh matching keyed plan and signed interactive approval. Coordinates both channel resource...
-
execute_forum_tag_changeExecuteExecute one reviewed exact Discord forum-tag create, metadata update, or deletion only after a fresh matching keyed plan and signed interactive approval. Reserves a one-shot key...
-
execute_global_application_command_changeExecuteCreate, completely update, or irreversibly delete one exact global application command after a fresh matching application-capability and full-localization inventory plan, signed...
-
execute_guild_blueprintExecuteExecute exactly one fresh reviewed frontier of a caller-retained Discord guild blueprint after signed interactive approval when a write is required. Signed state contains only r...
-
execute_guild_community_changeExecuteApply only the reviewed monotonic Discord Community state after a fresh matching plan and signed interactive approval. A real change claims the exact guild Community collection,...
-
execute_guild_expression_changeExecuteExecute one reviewed Discord guild emoji or sticker create, update, or delete after a fresh matching plan, signed interactive approval, a unique one-shot operation-key reservati...
-
execute_guild_incident_action_changeExecuteChange only reviewed Discord guild incident-action deadlines after a fresh matching plan and signed interactive approval. A real change reserves the one-shot operation key, reco...
-
execute_guild_scaffoldExecuteExecute only the ready frontier of one exact reviewed additive Discord guild scaffold after a fresh matching plan and signed interactive approval. Each bounded role or channel s...
-
execute_guild_soundboard_changeExecuteExecute one reviewed Discord guild soundboard create, metadata update, or delete after a fresh matching plan, signed interactive approval, a unique one-shot operation-key reserv...
-
execute_guild_template_changeExecuteExecute one reviewed Guild Template create, synchronize, metadata update, or delete after a fresh matching private full-inventory plan, signed interactive approval, durable guil...
-
execute_member_moderationExecuteExecute one exact reviewed Discord member moderation plan after host write approval, signed interactive approval, a final fresh evidence match, durable exact-member coordination...
-
execute_member_verification_changeExecuteExecute one reviewed exact Discord member verification-bypass change after a fresh matching complete-evidence plan, signed interactive approval, a unique one-shot operation-key ...
-
execute_member_voice_changeExecuteExecute one reviewed exact Discord member voice change after a fresh matching complete-evidence plan, signed interactive approval, unique one-shot reservation, pending content-f...
-
execute_message_forwardExecuteForward one exact eligible Discord message snapshot after a fresh matching plan, signed interactive approval, unique one-shot operation-key reservation, durable exact-target coo...
-
execute_native_interaction_commandExecuteInstall or remove the exact managed guild command after a fresh matching full-inventory plan, signed interactive approval, durable guild-wide exclusion, one-shot records, one no...
-
execute_onboarding_changeExecuteReplace one guild
-
execute_reaction_moderationExecuteRemove the reviewed reaction target from one exact Discord message only after a fresh matching plan and signed interactive approval. Coordinates the exact message across process...
-
execute_role_orderExecuteApply one exact reviewed relative Discord role-order change only after a fresh matching keyed plan and signed interactive approval. Durably coordinates the complete guild role c...
-
execute_scheduled_event_changeExecuteExecute one reviewed Discord scheduled event create, metadata update, status transition, or deletion after a fresh matching plan, signed interactive approval, a unique one-shot ...
-
execute_stage_instance_changeExecuteExecute one reviewed Discord Stage start, exact topic update, or end after a fresh matching plan, signed interactive approval, a unique one-shot operation-key reservation, pendi...
-
execute_thread_changeExecuteExecute one reviewed exact Discord thread lifecycle, metadata, connector self-membership, or exact-member change after a fresh matching complete-evidence plan, signed interactiv...
-
execute_thread_creationExecuteCreate one reviewed Discord thread only after a fresh matching plan and signed interactive approval. Reserves a unique one-shot operation key, records pending content-free activ...
-
execute_voice_channel_status_changeExecuteSet or clear one exact reviewed Discord voice channel status only after a fresh matching keyed plan and signed interactive approval. Reserves a one-shot key, records pending con...
-
plan_global_application_command_changeExecutePrepare a process-bound keyed plan to create, completely update, or delete one exact global application command owned by the verified pinned application. Reviews complete instal...
-
plan_guild_pruneExecutePrepare a process-bound keyed plan for one bounded non-exact Discord guild prune. Verifies pinned identity, exact guild and include-role policy, complete KICK_MEMBERS plus MANAG...
-
play_soundboard_soundExecutePlay one exact default or allowlisted custom sound in one exact allowlisted ordinary voice channel after fresh readiness proof and host write approval. Uses a one-shot request-b...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.