High-risk tools in Mcp Sitecore

High severity Mcp Sitecore MCP Server 17 of 153 tools

17 of the 153 tools in Mcp Sitecore are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

common-invoke-workflow-by-id Execute 3/5

Executes workflow action for a Sitecore item by its ID.
common-invoke-workflow-by-path Execute 4/5

Executes workflow action for a Sitecore item by its path.
common-new-item-clone-by-id Execute 3/5

Creates a new item clone based on the item provided by its ID.
common-new-item-clone-by-path Execute 4/5

Creates a new item clone based on the item provided by its path.
common-new-item-workflow-event-by-id Execute 3/5

Creates a new entry in the workflow history for a Sitecore item by its ID.
common-new-item-workflow-event-by-path Execute 4/5

Creates a new entry in the workflow history for a Sitecore item by its path.
common-restart-application Execute 3/5

Restarts the Sitecore Application pool.
indexing-initialize-search-index Execute 3/5

Initialize one or more Sitecore search indexes. If no name is provided, all indexes will be initialized.
indexing-initialize-search-index-item-by-id Execute 4/5

Rebuilds the index for a given tree with the specified root item by id and index name. Supports wildcard filtering for the index name.
indexing-initialize-search-index-item-by-path Execute 4/5

Rebuilds the index for a given tree with the specified root item by path and index name. Supports wildcard filtering for the index name.
indexing-stop-search-index Execute 3/5

Stop one or more Sitecore search indexes. If no name is provided, all running indexes will be stopped.
item-service-run-stored-query Execute 3/5

Run a stored Sitecore query by its definition item ID.
item-service-run-stored-search Execute 3/5

Run a stored Sitecore search by its definition item ID.
run-powershell-script Execute 4/5

Runs a PowerShell script and returns the output.
security-new-domain Execute 3/5

Creates a new Sitecore domain.
security-new-role Execute 3/5

Creates a new Sitecore role.
security-new-user Execute 4/5

Creates a new Sitecore user.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Mcp Sitecore

Tools at high risk

Attacks that target this class

More on Mcp Sitecore

Enforce policy on Mcp Sitecore