Critical-risk tools in Cmux

Critical severity Cmux MCP Server 2 of 23 tools

2 of the 23 tools in Cmux are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cmux_close_current_workspace Destructive

Close the workspace the CALLING pane runs in (identify.caller.workspace_ref) — NOT the focused one, which may be a workspace the user just clicked into. First call previews the ...
cmux_group_action Destructive

Run an action on a group: rename (needs name), collapse, expand, pin, unpin, focus (focuses its anchor), set-color (hex; omit to clear), set-icon (symbol; omit to clear), move (...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Cmux

Tools at critical risk

Attacks that target this class

More on Cmux

Enforce policy on every Cmux tool call.