# delete_attachment

Permanently delete an attachment. This action cannot be undone.

Agent View of the PolicyLayer registry record for `delete_attachment`. HTML page: https://policylayer.com/tools/dugynoo-huly-mcp/delete-attachment

## Facts

- Tool: `delete_attachment`
- Server: Huly (`dugynoo/huly-mcp`) — https://policylayer.com/tools/dugynoo-huly-mcp.md
- Homepage: https://github.com/dugynoo/huly-mcp
- Risk category: Destructive (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Hidden

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "delete_attachment",
    "arguments": {}
  }
}
```

## Why delete_attachment is rated Critical

This tool irreversibly deletes data (an attachment) with no undo capability. While the blast radius is limited to a single attachment rather than bulk data, permanent deletion of files without recovery options meets the Destructive category definition.

From the tool's own definition: "Tool description explicitly states 'Permanently delete an attachment' and 'This action cannot be undone.' The word 'Permanently' and 'cannot be undone' are the key indicators that this is an irreversible data destruction operation."

## Use case

AI agents call delete_attachment to permanently remove resources in Huly, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

## Recommended policy (PolicyLayer)

Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Huly:

```json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "delete_attachment"
  ]
}
```

## Other tools on Huly (217)

- `dedup_planner_todos` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/dedup-planner-todos.md
- `delete_card` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-card.md
- `delete_channel` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-channel.md
- `delete_channel_message` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-channel-message.md
- `delete_comment` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-comment.md
- `delete_component` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-component.md
- `delete_dm_message` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-dm-message.md
- `delete_document` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-document.md
- `delete_event` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-event.md
- `delete_issue` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-issue.md
- `delete_issue_template` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-issue-template.md
- `delete_label` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-label.md
- `delete_milestone` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-milestone.md
- `delete_notification` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-notification.md
- `delete_organization` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-organization.md
- `delete_person` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-person.md
- `delete_project` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-project.md
- `delete_relation` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-relation.md
- `delete_tag_category` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-tag-category.md
- `delete_teamspace` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-teamspace.md
- `delete_test_case` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-test-case.md
- `delete_test_plan` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-test-plan.md
- `delete_test_result` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-test-result.md
- `delete_test_run` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-test-run.md
- `delete_test_suite` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-test-suite.md
- `delete_thread_reply` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-thread-reply.md
- `delete_workspace` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/delete-workspace.md
- `remove_issue_relation` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/remove-issue-relation.md
- `remove_organization_member` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/remove-organization-member.md
- `remove_reaction` — Destructive — https://policylayer.com/tools/dugynoo-huly-mcp/remove-reaction.md
- …and 187 more: https://policylayer.com/tools/dugynoo-huly-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=dugynoo-huly-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/dugynoo-huly-mcp