High-risk tools in McFlow

High severity McFlow MCP Server 5 of 27 tools

5 of the 27 tools in McFlow are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

activate Execute

Activate or deactivate a workflow in n8n
compile Execute

Compile all workflows by injecting external code/prompt files
deploy Execute

Deploy workflows to n8n instance - handles all n8n import commands internally
execute Execute

Execute/test an n8n workflow - DO NOT use bash n8n commands, use this tool instead
start Execute

Start n8n server - replaces

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in McFlow

Tools at high risk

Attacks that target this class

More on McFlow

Enforce policy on every McFlow tool call.