High-risk tools in WebControl

High severity WebControl MCP Server 8 of 20 tools

8 of the 20 tools in WebControl are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

click Execute

Click an element by its ref ID (from get_page_content). Returns updated page content.
configure_network_capture Execute

configure_network_capture
create_session Execute

Create a new browser session with isolated cookies and storage. Set enable_tracing=true to record a Playwright trace for debugging.
execute_js Execute

Execute JavaScript on the current page. Returns updated page content.
fill Execute

Fill a form field by its ref ID with the given value. Returns updated page content.
navigate Execute

navigate
select Execute

Select a dropdown option by its ref ID. Value can be option text or value. Returns updated page content.
submit Execute

Submit a form by its ref ID (form element or submit button). Returns updated page content.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in WebControl

Tools at high risk

Attacks that target this class

More on WebControl

Enforce policy on every WebControl tool call.