High-risk tools in Maximo Enterprise MCP

High severity Maximo Enterprise MCP MCP Server 3 of 118 tools

3 of the 118 tools in Maximo Enterprise MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

generate_api_code Execute

Generate ready-to-use Maximo API code in Python, JavaScript, curl, or SQL.
generate_pm_workorders Execute

Trigger PM work order generation for upcoming scheduled maintenance. Requires supervisor role.
trigger_webhook Execute

Manually fire a test webhook for a registered event type. Requires admin role.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Maximo Enterprise MCP

Tools at high risk

Attacks that target this class

More on Maximo Enterprise MCP

Enforce policy on every Maximo Enterprise MCP tool call.