High-risk tools in Ncp

High severity Ncp MCP Server 62 of 275 tools

62 of the 275 tools in Ncp are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

apply Execute

Execute Terraform apply
apply_manifest Execute

Apply Kubernetes manifest to cluster
build_image Execute

Build Docker image from Dockerfile
build_job Execute

Trigger Jenkins job build
bulk_operations Execute

Perform bulk operations on Elasticsearch
click_element Execute

Click on a web element
clone Execute

Clone Git repository
connect Execute

Connect to mysql-api database
consume Execute

Consume messages from Kafka topic
create_completion Execute

Create OpenAI completion
create_context Execute

Create a new browser context
create_image Execute

Generate image with DALL-E
create_prediction Execute

Create model prediction
create_video Execute

Create Loom video
deploy Execute

Deploy using aws-ec2-api
deploy_project Execute

Deploy project to Vercel
deploy_server Execute

Deploy Vultr server instance
deploy_site Execute

Deploy site to Netlify
exec Execute

Execute shell command
exec_async Execute

Execute shell command asynchronously
execute Execute

Execute gitlab-api-v4 command
execute_cql Execute

Execute CQL query
execute_query Execute

Execute SQL query on PlanetScale database
find_element Execute

Find web element using various strategies
generate_image Execute

Generate image with Stable Diffusion
generate_rendition Execute

Generate image rendition using Adobe APIs
inference Execute

Run inference on Hugging Face model
install Execute

Install npm packages
lambda_invoke Execute

Invoke a Lambda function
navigate_page Execute

Navigate to a web page
pause Execute

Pause job (stops future executions).
plan Execute

Execute Terraform plan
produce Execute

Produce message to Kafka topic
publish Execute

Publish message to RabbitMQ exchange
push Execute

Push changes to remote repository
query Execute

Execute a SQL query on the SQLite database
query_nrql Execute

Execute NRQL query
query_range Execute

Execute range PromQL query
query_soql Execute

Execute SOQL query
read_query Execute

Execute a SELECT query on the PostgreSQL database
resume Execute

Resume paused job.
run Execute

Execute MCP tool (format: mcp:tool). Provides suggestions if not found.
run_command Execute

Execute Ansible ad-hoc command
run_container Execute

Run Docker container
run_cypher Execute

Execute Cypher query on Neo4j database
run_plan Execute

Execute Terraform plan
run_playbook Execute

Execute Ansible playbook
run_script Execute

Run npm script
scale Execute

Scale aws-ec2-api resources
scale_deployment Execute

Scale a deployment
scale_dyno Execute

Scale Heroku dyno
send_keys Execute

Send keystrokes to an element
start_ec2_instance Execute

Start an EC2 instance
start_session Execute

Start BrowserStack testing session
stop_container Execute

Stop a running Docker container
stop_ec2_instance Execute

Stop an EC2 instance
submit_job Execute

Submit job to Nomad cluster
take_screenshot Execute

Take a screenshot of the page
trigger Execute

Trigger an immediate execution of a scheduled job (manual run).
trigger_pipeline Execute

Trigger CircleCI pipeline
trigger_workflow Execute

Trigger GitHub Actions workflow
up Execute

Deploy Pulumi stack

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Ncp

Tools at high risk

Attacks that target this class

More on Ncp

Enforce policy on every Ncp tool call.