High-risk tools in CDP MCP Server

High severity CDP MCP Server MCP Server 27 of 288 tools

27 of the 288 tools in CDP MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

cdp_activate_schedule Execute

Activate a schedule via the workflow action handler.
cdp_calculate_audience Execute

Start an asynchronous audience count calculation.
cdp_deploy_workflow Execute

Deploy a workflow (make it active)
cdp_dw_execute_report Execute

Execute a report in real-time via the DW API path.
cdp_execute_audience_def Execute

Execute an audience definition to calculate the audience.
cdp_generate_query Execute

Generate a SQL query from a dataset definition.
cdp_generate_squery_def Execute

Generate arguments from a SQueryDef expression.
cdp_invoke_workflow_action Execute

cdp_invoke_workflow_action
cdp_login Execute

POST /authentication?action=login
cdp_logout Execute

POST /authentication?action=logout
cdp_post_tracking_event Execute

cdp_post_tracking_event
cdp_process_mailer_batch Execute

cdp_process_mailer_batch
cdp_provision_instance_action Execute

cdp_provision_instance_action
cdp_publish_web_campaign Execute

cdp_publish_web_campaign
cdp_query_sql Execute

cdp_query_sql
cdp_query_sql_post Execute

Execute a read-only SQL query via POST.
cdp_refresh_rtmeta Execute

Refresh the real-time metadata switch values.
cdp_rerun_job Execute

Re-run a completed or failed workflow job
cdp_resume_job Execute

Resume a suspended workflow job
cdp_retry_provision_instance Execute

cdp_retry_provision_instance
cdp_run_data_export Execute

cdp_run_data_export
cdp_run_workflow Execute

Trigger a workflow execution.
cdp_send_email Execute

Send an email of a specific type.
cdp_start_campaign Execute

cdp_start_campaign
cdp_stop_campaign Execute

Stop/kill a running campaign by ID. Sends a workflow kill signal.
cdp_suspend_job Execute

Suspend a running workflow job
cdp_validate_password_reset Execute

POST /authentication/reset?action=validate

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in CDP MCP Server

Tools at high risk

Attacks that target this class

More on CDP MCP Server

Enforce policy on every CDP MCP Server tool call.