High-risk tools in 0click Insta

High severity 0click Insta MCP Server 5 of 44 tools

5 of the 44 tools in 0click Insta are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

device_start Execute

Open the device browser in a terminal pane (spawns a Tern split when running inside Tern) and apply the anti-detection profile
device_stop Execute

Close the device
eval_page Execute

Run JavaScript in the device page (use it to repair selectors)
unfollow_bulk Execute

Unfollow only the accounts that do NOT follow back. Dry run unless confirm:true; limit caps the batch
unfollow_selected Execute

Unfollow exactly the handles you name: searches the following list, presses the row button, confirms. Dry run unless confirm:true

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in 0click Insta

Tools at high risk

Attacks that target this class

More on 0click Insta

Enforce policy on every 0click Insta tool call.