High-risk tools in Windows-MCP
9 of the 18 tools in Windows-MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
AppExecuteOpen/start/launch applications and manage windows. Keywords: open, start, launch, program, application, window, foreground, focus, resize. Three modes:
-
ClickExecuteClick
-
MultiEditExecuteEnters text into multiple input fields at specified coordinates locs=[[x,y,text], ...] or using labels=[[label,text], ...]. Provide either locs or labels.
-
MultiSelectExecuteSelects multiple items such as files, folders, or checkboxes if press_ctrl=True, or performs multiple clicks if False. Pass locs (list of coordinates) or labels (list of UI elem...
-
PowerShellExecuteShell/command execution. Keywords: shell, run, execute, cmd, terminal, command line, script. A comprehensive system tool for executing any PowerShell commands. Use it to navigat...
-
ScrollExecuteScrolls at coordinates [x, y], a UI element
-
ShortcutExecuteExecutes keyboard shortcuts using key combinations separated by +. Examples:
-
TypeExecuteTypes text at specified coordinates [x, y] or passing a UI element
-
WaitExecutePauses execution for specified duration in seconds. Use when waiting for: applications to launch/load, UI animations to complete, page content to render, dialogs to appear, or b...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.