High-risk tools in Neuron
29 of the 401 tools in Neuron are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
neuron_bot_api_chatExecuteSend a message to a bot via the API and receive a streaming or complete AI-generated response. Requires a valid API key with 'nrn_' prefix.
-
neuron_build_personaExecuteDistill a reusable voice from a Collection of mined content: analyzes the top-engagement items and reverse-engineers a voiceProfile (tone, diction, cadence, emoji/formatting hab...
-
neuron_build_persona_from_conversationExecuteDistill a reusable voice from an existing WhatsApp conversation's stored messages — no extension needed. `author` picks whose voice: 'me' (owner's own outgoing texts), 'contact'...
-
neuron_build_persona_from_textExecuteDistill a reusable voice from raw text — no Collection or browser extension needed. Feed it pasted posts, a chat/dialogue transcript, WhatsApp-export text, or your own well-craf...
-
neuron_pause_botExecutePause a bot to temporarily stop it from processing new messages. The bot retains its configuration and can be resumed later.
-
neuron_refresh_contact_listExecuteTrigger a refresh of a dynamic contact list. Re-evaluates criteria rules and/or AI prompt and materializes updated members.
-
neuron_request_pair_codeExecuteRequest a numeric pairing code for a Baileys channel as an alternative to QR code scanning. Requires the phone number to pair with.
-
neuron_resume_botExecuteResume a previously paused bot so it begins processing new messages again.
-
neuron_resume_campaignExecuteResume a previously paused campaign to restart message delivery.
-
neuron_run_flowExecuteManually trigger a flow run for testing. Starts at the 'trigger.manual' node if present, otherwise the first trigger node. Optionally provide a payload object that becomes {{tri...
-
neuron_run_lead_sourceExecuteRun a lead source now to pull new leads into the pool (queues the extraction).
-
neuron_run_list_campaign_nowExecuteFire the next batch of a paced list campaign immediately (on the next worker tick, ~30s), regardless of its schedule. The schedule continues normally afterward.
-
neuron_run_taskExecuteTrigger a task to run immediately (in addition to its normal schedule). Returns once the run is queued.
-
neuron_set_presenceExecuteSet typing indicator or online/offline presence on a WhatsApp chat. Only supported on Baileys channels.
-
neuron_start_channel_sessionExecuteStart a Baileys (direct WhatsApp) session for the channel. Generates a QR code for device pairing. Only applicable to Baileys-type channels.
-
neuron_start_social_channel_sessionExecuteStart or reconnect a social media session for the channel. Initializes the platform client with stored credentials.
-
neuron_stop_channel_sessionExecuteStop the active Baileys session for the channel and disconnect from WhatsApp. The channel can be restarted later.
-
neuron_stop_social_channel_sessionExecuteStop the active session for a social media channel. The channel can be restarted later.
-
neuron_studio_agentExecuteBuild a new video or edit an existing one from a natural-language instruction. Returns the updated ProjectDoc plus the list of edits made. Pass the returned `doc` back in to kee...
-
neuron_studio_makeExecuteOne-shot: build/edit a video from a prompt AND start the MP4 render. Returns the ProjectDoc, the edits, and a render `job` — poll it with neuron_studio_render_status until statu...
-
neuron_studio_transform_videoExecuteRun an AI transform on a hosted video via Replicate (async): op 'bg-remove' or 'face-swap' (face-swap needs imageUrl). Returns { id, status } — poll neuron_studio_transform_vide...
-
neuron_studio_transform_video_statusExecutePoll a video-transform job. When status is 'succeeded', videoUrl is the result (external — re-host before use).
-
neuron_sync_knowledgeExecuteTrigger a synchronization operation to refresh embeddings, reindex content, or update the knowledge base state.
-
neuron_takeover_conversationExecuteTransfer control of a conversation from the bot to a human agent. The bot will stop auto-responding until the conversation is released.
-
neuron_test_toolExecuteExecute a dry-run test of a custom API tool with sample arguments to verify the endpoint responds correctly.
-
neuron_toggle_taskExecutePause or resume a scheduled task (flips its enabled state and reschedules the next run).
-
neuron_webagent_killExecuteThe kill switch — flags a run to stop. It's cooperative: the browser extension stops on its next heartbeat (usually within ~12s) and finalizes the run.
-
neuron_webagent_runExecuteQueue a browser mission for the user's Neuron extension to run — mine content into a Collection or prospects into the lead pool. Returns a command id; the extension picks it up ...
-
neuron_webagent_stopExecuteQueue a graceful stop for the current mission (the extension finalizes it). For an immediate hard stop of a specific run, use neuron_webagent_kill.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.