High-risk tools in Pydoll

High severity Pydoll MCP Server 28 of 57 tools

28 of the 57 tools in Pydoll are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

execute_automation_script Execute

Execute predefined automation scripts
execute_javascript Execute

Execute JavaScript code in the browser context
navigate_to Execute

Navigate to a specific URL in a browser tab
new_tab Execute

Create a new tab in a browser instance
start_browser Execute

Start a new browser instance with specified configuration
stop_browser Execute

Stop a browser instance and clean up resources
block_requests Execute

Block specific network requests
bypass_cloudflare Execute

Attempt to bypass Cloudflare Turnstile protection
bypass_recaptcha Execute

Attempt to bypass reCAPTCHA v3 protection
download_file Execute

Download a file from a URL or trigger a download
evade_detection Execute

Apply comprehensive evasion techniques
go_back Execute

Navigate back in browser history
inject_script_library Execute

Inject JavaScript libraries into the page
intelligent_search Execute

Intelligently perform search on any website with automatic element detection
randomize_fingerprint Execute

Randomize browser fingerprint to avoid tracking
refresh_page Execute

Refresh the current page in a browser tab
rotate_proxy Execute

Rotate to a new proxy server
simulate_human_behavior Execute

Simulate realistic human interaction patterns
spoof_headers Execute

Spoof HTTP headers to appear more legitimate
throttle_network Execute

Simulate different network conditions
click_element Execute

Click on a web element with human-like behavior
enable_stealth_mode Execute

Enable advanced stealth mode to avoid bot detection
handle_bot_detection Execute

Handle generic bot detection challenges
intercept_network_requests Execute

Intercept and modify network requests and responses
modify_request_headers Execute

Modify HTTP request headers
randomize_timing Execute

Add random delays and timing variations
set_active_tab Execute

Switch to a specific tab in a browser
type_text Execute

Type text into an input element with realistic human typing

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Pydoll

Tools at high risk

Attacks that target this class

More on Pydoll

Enforce policy on every Pydoll tool call.