High-risk tools in Frontmcp

High severity Frontmcp MCP Server 29 of 206 tools

29 of the 206 tools in Frontmcp are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

admin_action Execute

Admin action not allowed by any skill - used for authorization testing
admin-background-job Execute

Admin-only background job. Authority check runs before task creation.
admin-only Execute

A tool restricted to admin role (RBAC roles.any)
browser_test Execute

A tool defined in the browser
build-shell Execute

Build an HTML shell with CSP, data injection, and optional bridge runtime
cancellable-wait Execute

Sleeps up to maxMs unless the task runner aborts us.
cold-start-test Execute

Tests cold start behavior in serverless environments
concurrency-mutex Execute

A mutex tool (maxConcurrent: 1, no queue)
concurrency-queued Execute

A mutex tool with queue (maxConcurrent: 1, queueTimeout: 3s)
deploy_application Execute

Deploy application to specified environment
emit-app-event Execute

Emit an app event to the ChannelEventBus for testing channel sources
execute_job Execute

Execute a registered job by name. Supports inline (synchronous) and background execution.
execute_workflow Execute

Execute a registered workflow by name. Supports inline and background execution.
expensive-operation Execute

Simulates an expensive computation with caching enabled
experimental-agent Execute

Experimental tool gated behind experimental-agent flag (disabled)
gated-acme Execute

Runs only when the per-session
load-component Execute

Resolve a UI source (npm, import, or function) into a loadable component
long-running-task Execute

Simulates a long-running task with progress notifications
node_runtime_tool Execute

Tool only available in Node.js runtime
non-cached Execute

Simulates a computation without caching
platform-test-full Execute

Full UI tool with all options for comprehensive platform testing
register_job Execute

Register a dynamic job that runs in a sandboxed environment.
session-isolation Execute

Test session isolation between different clients
simulate-file-event Execute

Simulate a file system event for the file-watcher channel
simulate-incoming Execute

Simulate an incoming message from the messaging service (for testing)
standalone_deploy_tool Execute

Tool only available in standalone deployment
test-progress-method Execute

Tests the this.progress() method for sending progress notifications
trigger-progress Execute

Send a progress/log notification to the client
trigger-resource-change Execute

Trigger a resource list changed notification

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Frontmcp

Tools at high risk

Attacks that target this class

More on Frontmcp

Enforce policy on every Frontmcp tool call.