High-risk tools in Rr

High severity Rr MCP Server 24 of 48 tools

24 of the 48 tools in Rr are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

breakpoint_set Execute

Set a breakpoint to pause execution at a specific
checkpoint_restore Execute

Restore a previously created checkpoint, instantly
continue Execute

Continue execution forward until hitting a breakpoint, signal, or program end.
finish Execute

Run until the current function returns, then stop at the caller.
frame_select Execute

Switch to a different stack frame to inspect its
gdb_raw Execute

Execute an arbitrary GDB command (escape hatch).
handle_signal Execute

Configure how GDB handles a specific signal (stop, pass to program, print).
info Execute

Run a GDB
interrupt Execute

Interrupt a running program to pause execution.
next Execute

Step forward one source line, stepping over function
nexti Execute

Step forward one machine instruction, stepping over call instructions.
print Execute

Evaluate any expression in the current context and return its value.
reverse_continue Execute

Continue execution backward (rr
reverse_finish Execute

Run backward to the point where the current function was called (function entry).
reverse_next Execute

Step backward one source line, stepping over function calls in reverse.
reverse_nexti Execute

Step backward one machine instruction, stepping over calls in reverse.
reverse_step Execute

Step backward one source line, entering into function calls in reverse.
reverse_stepi Execute

Step backward one machine instruction. Reverse counterpart of stepi.
run_to_event Execute

Run to a specific event number (rr global time).
session_create Execute

Create a new replay session for debugging a specific
step Execute

Step forward one source line, entering into function calls.
stepi Execute

Step forward one machine instruction. Use for
thread_select Execute

Switch to a different thread for inspection.
watchpoint_set Execute

Set a hardware watchpoint to break when a variable

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Rr

Tools at high risk

Attacks that target this class

More on Rr

Enforce policy on every Rr tool call.