Critical Risk →

delete_goal

删除目标 Args: goal_id: 目标ID (任务ID) Returns: 删除操作的结果

How to control delete_goal ↓

What delete_goal does on TickTick MCP Service

AI agents call delete_goal to permanently remove resources in TickTick MCP Service — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

Critical Risk

Why delete_goal needs a policy

This tool irreversibly deletes data (a goal) from the TickTick system. Deletion operations that cannot be undone fall under the Destructive category. While not involving financial data or code execution, the permanent loss of user goals represents significant data loss.

From the tool's definition Tool name is 'delete_goal' and description explicitly states '删除目标' (delete goal). The tool permanently removes a goal record by goal_id with no undo mechanism indicated.

Documented attack patterns abuse exactly the kind of access delete_goal gives an agent:

How to control delete_goal

PolicyLayer is an MCP gateway — it sits between your AI agents and TickTick MCP Service, and nothing reaches the server without passing your rules. This is the rule we recommend for delete_goal:

policy.json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "delete_goal"
  ]
}

delete_goal disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

  1. Create a free account and register TickTick MCP Service — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
RESTRICT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about delete_goal

What does the delete_goal tool do? +

删除目标 Args: goal_id: 目标ID (任务ID) Returns: 删除操作的结果. It is categorised as a Destructive tool in the TickTick MCP Service MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on delete_goal? +

Register the TickTick MCP Service MCP server in PolicyLayer and add a rule for delete_goal: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches TickTick MCP Service. Nothing to install.

What risk level is delete_goal? +

delete_goal is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit delete_goal? +

Yes. Add a rate_limit block to the delete_goal rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block delete_goal completely? +

Set action: deny in the PolicyLayer policy for delete_goal. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides delete_goal? +

delete_goal is provided by the TickTick MCP Service MCP server (galaxyxieyu/didatodolist-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every TickTick MCP Service tool call.

Start from TickTick MCP Service, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

28 TickTick MCP Service tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.