High-risk tools in Minecraft Dev MCP
3 of the 20 tools in Minecraft Dev MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
decompile_minecraft_versionExecuteDecompile an entire Minecraft version. By default downloads the client JAR from Mojang, remaps it to the chosen mapping, and runs VineFlower across every class — subsequent call...
-
decompile_mod_jarExecuteDecompile a mod JAR file to readable Java source code. The JAR can be either the original mod JAR (with intermediary mappings) or a remapped JAR (from remap_mod_jar). Decompiled...
-
remap_mod_jarExecuteRemap a Fabric mod JAR from intermediary mappings to human-readable mappings. Useful for reading mod source code. Supports both WSL (/mnt/c/...) and Windows (C:\\...) paths.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.