Critical Risk →

abort_sessions_user

TERMINATES all active sessions for a specified user. This immediately kills all running queries for that user. Use cautiously for emergency situations like runaway queries or when a user

How to control abort_sessions_user ↓

What abort_sessions_user does on Teradata Workload Management (WLM) MCP Server

AI agents call abort_sessions_user to permanently remove resources in Teradata Workload Management (WLM) MCP Server — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

Critical Risk

Why abort_sessions_user needs a policy

The tool irreversibly kills all active sessions and running queries for a user. Terminated sessions and aborted queries cannot be undone — any in-flight work is lost. The blast radius is critical because misuse could disrupt an entire user's workload or accidentally target the wrong user, causing widespread data processing interruption.

From the tool's definition TERMINATES all active sessions for a specified user. This immediately kills all running queries for that user.

Documented attack patterns abuse exactly the kind of access abort_sessions_user gives an agent:

How to control abort_sessions_user

PolicyLayer is an MCP gateway — it sits between your AI agents and Teradata Workload Management (WLM) MCP Server, and nothing reaches the server without passing your rules. This is the rule we recommend for abort_sessions_user:

policy.json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "abort_sessions_user"
  ]
}

abort_sessions_user disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

  1. Create a free account and register Teradata Workload Management (WLM) MCP Server — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
RESTRICT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about abort_sessions_user

What does the abort_sessions_user tool do? +

TERMINATES all active sessions for a specified user. This immediately kills all running queries for that user. Use cautiously for emergency situations like runaway queries or when a user. It is categorised as a Destructive tool in the Teradata Workload Management (WLM) MCP Server MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on abort_sessions_user? +

Register the Teradata Workload Management (WLM) MCP Server MCP server in PolicyLayer and add a rule for abort_sessions_user: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Teradata Workload Management (WLM) MCP Server. Nothing to install.

What risk level is abort_sessions_user? +

abort_sessions_user is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit abort_sessions_user? +

Yes. Add a rate_limit block to the abort_sessions_user rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block abort_sessions_user completely? +

Set action: deny in the PolicyLayer policy for abort_sessions_user. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides abort_sessions_user? +

abort_sessions_user is provided by the Teradata Workload Management (WLM) MCP Server MCP server (teradata-labs/mcp-server-teradata-wlm). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Teradata Workload Management (WLM) MCP Server tool call.

Start from Teradata Workload Management (WLM) MCP Server, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

41 Teradata Workload Management (WLM) MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.