High-risk tools in Anaplan MCP
6 of the 70 tools in Anaplan MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
cancel_taskExecuteCancel a running task. taskId comes from the run_* response or show_tasks.
-
run_exportExecuteExecute an export and return the data inline. Best for bulk reports across all products/customers/regions -- prefer this over calling read_cells in a loop. Handles the full run-...
-
run_importExecuteUpload CSV/JSON data to a file, then execute an import action. Use mappingParameters to target a specific dimension (e.g., import into
-
run_processExecuteExecute a process (chain of imports/exports/deletes). Use mappingParameters to target a specific dimension at runtime. Use show_processes first. Monitor with get_action_status; ...
-
create_list_readrequestExecuteStart a large volume list read (for lists too large for get_list_items). Lifecycle: create -> poll with get_list_readrequest -> download pages with get_list_readrequest_page -> ...
-
open_modelExecuteOpen (wake up) a model. May return 202 if model is loading.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.