High-risk tools in Keploy
11 of the 103 tools in Keploy are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
devloop_expand_coverageExecuteExpand V1 API-test coverage from the single seed flow to the remaining detected resources. Use this AFTER devloop_mutation_demo has surfaced a positive catch result for the FIRS...
-
devloop_record_sandboxExecuteRecord mocks for V1 repo-mode API tests using the V1-native CLI command `keploy sandbox local record`. Runs the dev's app under the keploy eBPF agent, drives the V1 chained-CRUD...
-
devloop_scaffold_ciExecuteScaffold the GitHub Actions workflow that runs the V1 API tests on every PR. Returns the exact YAML content to write to .github/workflows/keploy.yml + the Bash command to set th...
-
devloop_schema_drift_reportExecuteReport the gap between the app's OpenAPI spec and its V1 API-tests coverage. Reuses the existing schema-coverage endpoint that get_coverage_gaps consumes, but frames the result ...
-
devloop_self_healExecuteDiagnose a failing V1 API test and propose an action. Triggered when: * keploy test-gen run exited non-zero in a fresh agent session (the dev's code changed since the test was...
-
run_and_reportExecuteRun test suites and return results with failures and coverage. !! DO NOT USE for local-app "tests for my changes" flows !! This tool sends the run to the SaaS backend which REJ...
-
runTestSuitesExecutePOST /apps/{appId}/test-suites/run — Run test suites — Run test suites against a PUBLIC target URL. DO NOT use for local-app / localhost runs — base_url must be reachable from t...
-
scaffold_pipeline_workflowExecuteGenerate the exact CI workflow YAML to add keploy sandbox tests to a pull-request pipeline, and tell you where to write it. Use this when the dev asks to "add keploy sandbox tes...
-
startLoadTestExecutePOST /apps/{appId}/load-tests — Start a load test — Requires scope: `write`.
-
stopJobExecutePOST /jobs/{jobId}/stop — Stop a running job — Requires scope: `write`.
-
stopLoadTestExecutePOST /apps/{appId}/load-tests/{runId}/stop — Stop a running load test — Requires scope: `write`.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.