High-risk tools in Mac

High severity Mac MCP Server 23 of 44 tools

23 of the 44 tools in Mac are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

activate_app Execute

Brings an application to the foreground
click Execute

Performs a mouse click at specified coordinates. Supports left, right, middle buttons and modifier keys
click_menu_item Execute

Clicks a menu item by path (e.g.,
click_status_bar_item Execute

Clicks a status bar item to open its menu
click_status_bar_menu_item Execute

Clicks a menu item within a status bar menu
click_ui_element Execute

Clicks a UI element by path (e.g.,
double_click Execute

Performs a double-click at specified coordinates
drag Execute

Performs a drag operation from start to end coordinates
focus_ui_element Execute

Sets keyboard focus to a UI element
focus_window Execute

Brings a specific window to the front by app name and optional window index
key_combination Execute

Presses a focused-app or menu key combination with modifiers; OS-global hotkeys such as Electron globalShortcut are not guaranteed
launch_app Execute

Launches an application by name (e.g.,
minimize_window Execute

Minimizes a window to the Dock
move_mouse Execute

Moves the mouse cursor to specified coordinates without clicking
move_window Execute

Moves a window to specified x, y coordinates
press_key Execute

Presses a key by name (Enter, Tab, Escape, F1-F12, Arrow keys, etc.)
quit_app Execute

Gracefully quits an application by name
reveal_in_finder Execute

Opens Finder and selects the specified file or folder
scroll Execute

Scrolls in a specified direction (up, down, left, right) at optional coordinates
scroll_to_element Execute

Scrolls until a UI element with specified text or role becomes visible
send_notification Execute

Displays a macOS notification with title, optional message, subtitle, and sound
set_volume Execute

Sets the system volume to a specified percentage (0-100)
type_text Execute

Types text at the current cursor position with optional delay between characters

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Mac

Tools at high risk

Attacks that target this class

More on Mac

Enforce policy on every Mac tool call.