Critical Risk →

pt_delete_link

Elimina el enlace conectado a una interfaz específica de un dispositivo en PT.

How to control pt_delete_link ↓

What pt_delete_link does on Packet Tracer MCP

AI agents call pt_delete_link to permanently remove resources in Packet Tracer MCP — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

Critical Risk

Why pt_delete_link needs a policy

This tool permanently removes network connectivity links in a Packet Tracer simulation. While the blast radius is confined to a simulated environment (not production), the action cannot be undone and requires reconfiguration to restore. Deletion operations that cannot be reversed belong in the Destructive category.

From the tool's definition Tool name 'pt_delete_link' and description 'Elimina el enlace conectado a una interfaz específica de un dispositivo en PT' (translates to 'Deletes the link connected to a specific interface of a device in PT').

Documented attack patterns abuse exactly the kind of access pt_delete_link gives an agent:

How to control pt_delete_link

PolicyLayer is an MCP gateway — it sits between your AI agents and Packet Tracer MCP, and nothing reaches the server without passing your rules. This is the rule we recommend for pt_delete_link:

policy.json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "pt_delete_link"
  ]
}

pt_delete_link disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

  1. Create a free account and register Packet Tracer MCP — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
RESTRICT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about pt_delete_link

What does the pt_delete_link tool do? +

Elimina el enlace conectado a una interfaz específica de un dispositivo en PT. It is categorised as a Destructive tool in the Packet Tracer MCP MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on pt_delete_link? +

Register the Packet Tracer MCP server in PolicyLayer and add a rule for pt_delete_link: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Packet Tracer MCP. Nothing to install.

What risk level is pt_delete_link? +

pt_delete_link is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit pt_delete_link? +

Yes. Add a rate_limit block to the pt_delete_link rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block pt_delete_link completely? +

Set action: deny in the PolicyLayer policy for pt_delete_link. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides pt_delete_link? +

pt_delete_link is provided by the Packet Tracer MCP server (mats2208/mcp-packet-tracer). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Packet Tracer MCP tool call.

Start from Packet Tracer MCP, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

33 Packet Tracer MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.