Critical Risk →

remove_element

Remove an element from the form by its ID. Use get_form_summary to find element IDs.

Part of the Weavely AI Forms & Surveys server.

remove_element can permanently delete data in Weavely AI Forms & Surveys, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE WEAVELY AI FORMS & SURVEYS →

Free to start. No card required.

AI agents may call remove_element to permanently remove or destroy resources in Weavely AI Forms & Surveys. Without a policy, an autonomous agent could delete critical data in a loop with no way to undo the damage. PolicyLayer blocks destructive tools by default and requires explicit human approval before enabling them.

Without a policy, an AI agent could call remove_element in a loop, permanently destroying resources in Weavely AI Forms & Surveys. There is no undo for destructive operations. PolicyLayer blocks this tool by default and only allows it when a human explicitly approves the action.

Destructive tools permanently remove data. Block by default. Only enable with explicit approval workflows.

policy.json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "remove_element"
  ]
}

See the full Weavely AI Forms & Surveys policy for all 13 tools.

Get this rule live on your own Weavely AI Forms & Surveys server in minutes. PolicyLayer enforces it on every call, before it runs.

ENFORCE ON MY WEAVELY AI FORMS & SURVEYS →

View all 13 tools →

These attack patterns abuse exactly the kind of access remove_element gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

Every attack above starts with a tool call. PolicyLayer checks each one against your policy first, so remove_element only ever does what you allow.

SECURE WEAVELY AI FORMS & SURVEYS →

Other destructive tools across the catalogue. The same approach applies to each: deny by default, or require human approval.

What does the remove_element tool do? +

Remove an element from the form by its ID. Use get_form_summary to find element IDs.. It is categorised as a Destructive tool in the Weavely AI Forms & Surveys MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on remove_element? +

Register the Weavely AI Forms & Surveys MCP server in PolicyLayer and add a rule for remove_element: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Weavely AI Forms & Surveys. Nothing to install.

What risk level is remove_element? +

remove_element is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit remove_element? +

Yes. Add a rate_limit block to the remove_element rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block remove_element completely? +

Set action: deny in the PolicyLayer policy for remove_element. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides remove_element? +

remove_element is provided by the Weavely AI Forms & Surveys MCP server (florian/weavely). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Weavely AI Forms & Surveys tool call.

Deterministic rules across all 13 Weavely AI Forms & Surveys tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.