High-risk tools in Ha Nexus Agent

High severity Ha Nexus Agent MCP Server 41 of 276 tools

41 of the 276 tools in Ha Nexus Agent are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

activate_scene Execute

Activate a scene.
build_from_recipe Execute

build_from_recipe
bulk_control Execute

bulk_control
call_service Execute

Call any Home Assistant service. E.g. domain='light', service='turn_on', data={'entity_id':'light.living_room','brightness':200}.
cancel_timer Execute

Cancel a running timer.
control_area Execute

Turn on/off/toggle all entities of a domain in an area.
fire_event Execute

Fire a Home Assistant event.
git_checkout_branch Execute

Switch to an existing branch.
git_commit_all Execute

Stage all changes and commit them with a message. Use before making risky changes as a checkpoint.
git_init_config Execute

Initialize git repository in HA config directory. Run once before using other git tools.
install_addon Execute

Install an add-on from its slug (must already be in a registered repository).
install_hacs_repository Execute

Install a HACS repository, optionally pinning a specific version.
media_play_pause Execute

Toggle play/pause on a media player.
press_button Execute

Press a button entity.
refresh_index Execute

Force-rebuild the search index (run after dynamically adding tools at runtime).
reload_all Execute

Reload core configuration (automations, scripts, scenes, groups, etc.).
reload_automations Execute

Reload all automations from YAML.
reload_config Execute

Reload configuration for a domain (automation, script, scene, input_boolean, etc.).
reload_helpers Execute

Reload all helper entities from configuration.
reload_integration Execute

Reload a specific integration config entry.
reload_scenes Execute

Reload scenes from YAML.
reload_scripts Execute

Reload all scripts from YAML.
reload_themes Execute

Reload themes from `<config>/themes/`. Call after creating or editing theme files.
reload_zones Execute

Reload zones from YAML via service `zone.reload`.
render_template Execute

Render a Jinja2 template string using HA template engine. Useful for testing templates before saving.
restart_addon Execute

Restart an add-on (stop + start).
restart_core Execute

Restart Home Assistant Core. DANGEROUS — requires confirm=True.
restart_ha Execute

Restart Home Assistant. WARNING: causes ~30s downtime.
restart_host Execute

Reboot the host machine. VERY DANGEROUS — requires confirm=True.
run_script Execute

Run a script, optionally with variables.
start_addon Execute

Start an installed add-on.
start_config_flow Execute

Start a new config flow for the given integration domain.
start_timer Execute

Start a timer. duration format: HH:MM:SS or number of seconds.
stop_addon Execute

Stop a running add-on.
submit_config_flow_step Execute

Submit user input for the current step of a config flow.
subscribe_trigger Execute

Wait for a HA trigger to fire. Returns the trigger context when it fires.
toggle Execute

Toggle an entity between on and off.
trigger_automation Execute

Manually trigger an automation.
turn_off Execute

Turn off an entity.
turn_on Execute

Turn on an entity. Optional: brightness (0-255), color_temp (mireds), rgb_color ([r,g,b]).
update_addon Execute

Update an add-on to the latest available version.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Ha Nexus Agent

Tools at high risk

Attacks that target this class

More on Ha Nexus Agent

Enforce policy on every Ha Nexus Agent tool call.