Remove one of the caller's provisioned databases, including its runtime workload and active routing.
AI agents call remove_database to permanently remove resources in PlugLayer MCP Server — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.
This tool performs an irreversible deletion action on database infrastructure and data. Once a database is removed, the data cannot be recovered and the action cannot be undone. While the blast radius may be scoped to the caller's own resources, the destructive nature and permanence of data deletion places this in the Destructive category, which outranks Execute due to its irreversibility.
From the tool's definition Tool description explicitly states 'Remove one of the caller's provisioned databases, including its runtime workload and active routing.' The verb 'remove' combined with 'provisioned databases' and the scope including 'runtime workload and active routing'…
Attacks that exploit this kind of access
Remove one of the caller's provisioned databases, including its runtime workload and active routing. It is categorised as a Destructive tool in the PlugLayer MCP Server MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.
Register the PlugLayer MCP Server MCP server in PolicyLayer and add a rule for remove_database: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches PlugLayer MCP Server. Nothing to install.
remove_database is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the remove_database rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for remove_database. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
remove_database is provided by the PlugLayer MCP Server MCP server (pluglayer/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →