delete_bookmark

THE RISK

Critical Risk

Deleting a bookmark is an irreversible removal action (the bookmark is gone unless re-added manually). While the blast radius is low (only affects saved bookmarks, not the tweet itself), the action is destructive in nature as it removes data without a recovery mechanism.

From the tool's definition 'Removes the tweet from bookmarks' — permanently removes a saved bookmark entry

Documented attack patterns abuse exactly the kind of access delete_bookmark gives an agent:

HOW TO CONTROL DELETE_BOOKMARK

PolicyLayer is an MCP gateway — it sits between your AI agents and X (Twitter) MCP server, and nothing reaches the server without passing your rules. This is the rule we recommend for delete_bookmark:

policy.json

{
  "version": "1",
  "default": "deny",
  "hide": [
    "delete_bookmark"
  ]
}

delete_bookmark disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

Create a free account and register X (Twitter) MCP server — nothing to install.
Add this policy — paste it, or build it visually.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

RESTRICT THIS TOOL →

Free to start. No card required.

EXPLORE

More X (Twitter) MCP server tools

Destructive delete_all_bookmarks DESTRUCTIVE AND IRREVERSIBLE: Permanently deletes ALL bookmarks one by one. This cannot be Destructive delete_tweet Delete a tweet by its ID Write bookmark_tweet Adds the tweet to bookmarks Write favorite_tweet Favorites a tweet Write unfavorite_tweet Unfavorites a tweet Write create_poll_tweet Create a tweet with a poll Write post_tweet Post a tweet with optional media, reply, and tags Write vote_on_poll Vote on a poll (mocked)

All 24 X (Twitter) MCP server tools →

Destructive tools on other servers

Frida Game Hacking MCP clear_scan MegaMemory remove_concept Frida Agent MCP kill_app 1MCP Server mcp_uninstall

Go deeper

Critical-risk tools in X (Twitter) MCP server → Every critical-risk tool this server exposes, in one view.
All critical-risk MCP tools → Every critical-risk tool across the catalogue, and the policy pattern that contains them.
The MCP Attack Database → Documented attack patterns against MCP deployments — and the policies that stop them.
Rate Limiting MCP Tool Calls: A Practical Guide →
MCP Security: Why Prompt Guardrails Aren't Enough →

FAQ

What does the delete_bookmark tool do? +

Removes the tweet from bookmarks. It is categorised as a Destructive tool in the X (Twitter) MCP server MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on delete_bookmark? +

Register the X (Twitter) MCP server MCP server in PolicyLayer and add a rule for delete_bookmark: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches X (Twitter) MCP server. Nothing to install.

What risk level is delete_bookmark? +

delete_bookmark is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit delete_bookmark? +

Yes. Add a rate_limit block to the delete_bookmark rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block delete_bookmark completely? +

Set action: deny in the PolicyLayer policy for delete_bookmark. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides delete_bookmark? +

delete_bookmark is provided by the X (Twitter) MCP server MCP server (rafaljanicki/x-twitter-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every X (Twitter) MCP server tool call.

Deterministic rules across all 24 X (Twitter) MCP server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN X (TWITTER) →

Free to start. No card required.

24 X (Twitter) MCP server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// WHAT DELETE_BOOKMARK ON X (TWITTER) MCP SERVER DOES

// THE RISK

// HOW TO CONTROL DELETE_BOOKMARK

// EXPLORE