High-risk tools in AIquila — Nextcloud MCP Server
11 of the 301 tools in AIquila — Nextcloud MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
aiquila_testExecuteTest AIquila Claude API integration with a simple prompt
-
disable_coworkerExecuteDisable a coworker so it stops running on its schedule.
-
enable_appExecuteEnable a disabled Nextcloud app. Requires admin privileges
-
extract_archiveExecuteExtract a zip archive in Nextcloud into a destination folder. Runs server-side.
-
generate_imageExecuteGenerate an image from a text prompt using Nextcloud's text-to-image AI provider (e.g. Stable Diffusion via LocalAI). Returns the task ID; use get_task_result to check completion.
-
install_appExecuteInstall a Nextcloud app from the App Store via occ app:install
-
process_textExecuteSubmit a text-processing task to Nextcloud's AI framework and return the task ID. Use get_task_result to poll until it completes. Common task types: 'core:text2text' (free promp...
-
resume_coworkerExecuteResume a paused coworker.
-
run_coworkerExecuteRun a coworker immediately (synchronously) and return the run result.
-
run_occExecuteExecute an allowlisted Nextcloud OCC command on the server and return the output. Only commands in the allowlist may be run (configurable via MCP_OCC_ALLOWLIST env var). Allowed...
-
run_setup_checksExecuteRun Nextcloud setup checks to verify system configuration (security, performance, PHP modules, etc.). Requires admin privileges
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.