High-risk tools in Iconnect
48 of the 279 tools in Iconnect are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
activate_tabExecuteSwitch to a specific Safari tab. Use list_tabs to find window/tab indices.
-
ai_agentExecuteRun a prompt through Apple
-
ai_chatExecuteSend a message to an on-device AI session using Apple Foundation Models. Note: each call creates a fresh session — sessionName is for caller-side tracking only, not server-side ...
-
ai_plan_metricsExecuteRun a sample of planner goals against the on-device Foundation Model and report the aggregate score.
-
connect_bluetoothExecuteConnect to a BLE device by its UUID. The UUID can be obtained from scan_bluetooth results.
-
disconnect_bluetoothExecuteDisconnect a BLE device by its UUID.
-
edit_shortcutExecuteOpen a Siri Shortcut in the Shortcuts app for manual editing. Uses UI automation (System Events) to activate the app, search for the shortcut, and open it. The user can then edi...
-
event_subscribeExecuteStart real-time monitoring of Apple data changes: calendar, reminders, clipboard, mail unread count, focus mode, now-playing track, and watched file paths.
-
generate_imageExecuteGenerate an image from a text description using Apple Intelligence on-device image generation (Image Playground).
-
generate_textExecuteGenerate text using Apple
-
gws_rawExecuteExecute any Google Workspace CLI command. For advanced use when specific tools don
-
import_shortcutExecuteImport a .shortcut file into Siri Shortcuts. Uses the macOS shortcuts CLI to import the shortcut from the specified file path.
-
keynote_start_slideshowExecuteStart playing a Keynote slideshow from a specific slide.
-
launch_appExecuteLaunch an application by name. Lightweight — just activates the app without reading its accessibility tree.
-
local_llm_generateExecuteGenerate text using a local Ollama model. Runs entirely on your machine — no data sent to any cloud.
-
minimize_windowExecuteMinimize or restore a window.
-
move_windowExecuteMove a window to a specific position on screen.
-
open_addressExecuteOpen a specific address in Apple Maps.
-
open_urlExecuteOpen a URL in Safari
-
play_playlistExecuteStart playing a playlist by name, with optional shuffle control.
-
play_podcast_episodeExecutePlay a specific podcast episode by name, optionally from a specific show.
-
play_trackExecutePlay a specific track by name, optionally from a specific playlist.
-
playback_controlExecuteControl Music playback: play, pause, nextTrack, previousTrack.
-
podcast_playback_controlExecuteControl Podcasts playback: play, pause, next, previous.
-
prevent_sleepExecutePrevent the Mac from sleeping for a specified duration using caffeinate. The assertion is transient — it auto-releases when the timer elapses; no manual stop is required.
-
record_screenExecuteRecord the screen for a specified duration (1-60 seconds). Returns the recording as a .mov file path. Requires Screen Recording permission.
-
resize_windowExecuteResize a window to specific dimensions.
-
rewrite_textExecuteRewrite text in a specified tone using Apple Intelligence (on-device Foundation Models). Requires macOS 26+ with Apple Silicon.
-
run_javascriptExecuteExecute JavaScript in a Safari tab. Use list_tabs to find window/tab indices. Returns the result as a string.
-
run_shortcutExecuteRun a Siri Shortcut by name. Optionally provide text input. Returns the shortcut
-
semantic_indexExecuteBuild the local vector index over enabled Apple apps for semantic search — replaces any existing index; embeddings need GEMINI_API_KEY or the Swift bridge.
-
send_fileExecuteSend a file attachment via iMessage/SMS. Requires absolute file path and recipient handle.
-
send_messageExecuteSend a text message via iMessage/SMS. Requires a phone number or email as the target handle.
-
set_volumeExecuteSet the system output volume (0-100) and/or mute state.
-
setup_permissionsExecuteTrigger macOS permission prompts for all Apple apps used by AirMCP. Run this once after installation to grant all permissions at once. Each app will show a one-time macOS permis...
-
show_notificationExecuteDisplay a macOS system notification with optional title, subtitle, and sound.
-
system_powerExecuteShutdown or restart the Mac. Use with caution.
-
system_sleepExecutePut the Mac to sleep.
-
toggle_dark_modeExecuteToggle macOS appearance between dark mode and light mode.
-
toggle_focus_modeExecuteToggle Do Not Disturb (Focus mode) on or off.
-
toggle_wifiExecuteTurn WiFi on or off.
-
tv_playExecutePlay a movie or episode by name.
-
tv_playback_controlExecuteControl Apple TV playback: play, pause, next, previous.
-
ui_clickExecuteClick a UI element either by exact screen coordinates (x, y) or by searching for an element containing the given text. Optionally filter by accessibility role (e.g.
-
ui_open_appExecuteOpen an application by name or bundle ID and return an accessibility tree summary of its windows and top-level UI elements. Requires Accessibility permissions.
-
ui_perform_actionExecuteFind a UI element by locator (role + title/value) and perform an accessibility action on it.
-
ui_press_keyExecuteSend a key or key combination (e.g. Return, Cmd+S, Ctrl+C). Supports modifier keys: command/cmd, shift, option/alt, control/ctrl. Special keys: return, enter, tab, space, delete...
-
ui_typeExecuteType text into the currently focused field using simulated keystrokes via System Events. Optionally activate a specific app first. Requires Accessibility permissions.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.