High-risk tools in MCP Fullstack

High severity MCP Fullstack MCP Server 14 of 66 tools

14 of the 66 tools in MCP Fullstack are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

browser.end_session Execute

End a browser session
browser.start_session Execute

Start a new browser session
db.start_connection Execute

Start a new database connection
render.deploy Execute

Deploy a Render service
render.redeploy Execute

Redeploy a Render service
render.scale Execute

Scale a service
supabase.functions_invoke Execute

Invoke Supabase Edge Function
supabase.rest Execute

Make REST API call to Supabase
supabase.rpc Execute

Call Supabase RPC function
supabase.sql Execute

Execute SQL query on Supabase
tracking.funnels_run Execute

Run funnel analysis
vercel.deploy Execute

Deploy to Vercel
vercel.promote Execute

Promote deployment to production
vercel.redeploy Execute

Redeploy a Vercel deployment

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in MCP Fullstack

Tools at high risk

Attacks that target this class

More on MCP Fullstack

Enforce policy on every MCP Fullstack tool call.