# stateset_delete_user Deletes a user account. WARNING: This is permanent. Consider deactivating instead if the user may need to be restored. Agent View of the PolicyLayer registry record for `stateset_delete_user`. HTML page: https://policylayer.com/tools/stateset-mcp-server/stateset-delete-user ## Facts - Tool: `stateset_delete_user` - Server: Stateset (`stateset/stateset-mcp-server`) — https://policylayer.com/tools/stateset-mcp-server.md - Homepage: https://github.com/stateset/stateset-mcp-server - Risk category: Destructive (Critical risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Hidden ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "stateset_delete_user", "arguments": {} } } ``` ## Why stateset_delete_user is rated Critical This tool irreversibly deletes a user account and cannot be undone, matching the Destructive category definition. While not directly involving financial data, the permanent nature of account deletion and the warning against accidental use elevates severity to high. An AI agent misusing this could permanently remove legitimate user accounts, causing significant operational harm and potential compliance issues. From the tool's own definition: "Tool description explicitly states 'Deletes a user account. WARNING: This is permanent.' The verb 'Deletes' combined with 'permanent' and the cautionary note about inability to restore indicates irreversible data destruction." ## Use case AI agents call stateset_delete_user to permanently remove resources in Stateset, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo. ## Recommended policy (PolicyLayer) Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Stateset: ```json { "version": "1", "default": "deny", "hide": [ "stateset_delete_user" ] } ``` ## Other tools on Stateset (237) - `stateset_cancel_asn` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-cancel-asn.md - `stateset_cancel_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-cancel-order.md - `stateset_cancel_purchase_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-cancel-purchase-order.md - `stateset_cancel_work_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-cancel-work-order.md - `stateset_clear_cache` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-clear-cache.md - `stateset_clear_cart` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-clear-cart.md - `stateset_delete_asn` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-asn.md - `stateset_delete_bill_of_materials` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-bill-of-materials.md - `stateset_delete_cart` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-cart.md - `stateset_delete_cash_sale` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-cash-sale.md - `stateset_delete_customer` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-customer.md - `stateset_delete_fulfillment_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-fulfillment-order.md - `stateset_delete_inventory` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-inventory.md - `stateset_delete_invoice` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-invoice.md - `stateset_delete_item_receipt` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-item-receipt.md - `stateset_delete_manufacturer_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-manufacturer-order.md - `stateset_delete_notification` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-notification.md - `stateset_delete_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-order.md - `stateset_delete_payment` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-payment.md - `stateset_delete_product` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-product.md - `stateset_delete_product_variant` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-product-variant.md - `stateset_delete_purchase_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-purchase-order.md - `stateset_delete_rma` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-rma.md - `stateset_delete_robot_serial` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-robot-serial.md - `stateset_delete_sales_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-sales-order.md - `stateset_delete_shipment` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-shipment.md - `stateset_delete_supplier` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-supplier.md - `stateset_delete_warranty` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-warranty.md - `stateset_delete_work_order` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-delete-work-order.md - `stateset_remove_bom_component` — Destructive — https://policylayer.com/tools/stateset-mcp-server/stateset-remove-bom-component.md - …and 207 more: https://policylayer.com/tools/stateset-mcp-server.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=stateset-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/stateset-mcp-server