High-risk tools in Mcp Anything
33 of the 261 tools in Mcp Anything are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
build_configureExecutebuild_configure
-
build_runExecuteGenerate the Unity build command.
-
cli_by_categoryExecutecli_by_category
-
cli_installExecuteInstall a CLI-Anything harness from clianything.cc via pip.
-
cli_runExecutecli_run
-
element_clickExecuteClick an element. Toggles checkbox if element type is checkbox.
-
element_hoverExecuteHover over an element (triggers hover/mouseover state).
-
element_scroll_toExecuteScroll the page to bring an element into view.
-
form_submitExecuteSubmit a registered form. Logs the submission with field values.
-
network_add_interceptorExecutenetwork_add_interceptor
-
node_attach_scriptExecutenode_attach_script
-
object_transformExecuteobject_transform
-
page_go_backExecuteGo back to the previous page in history.
-
page_go_forwardExecuteGo forward in browser history.
-
page_navigateExecuteNavigate to a URL. Clears elements and forms. Pushes current URL to history.
-
page_refreshExecuteRefresh the current page (updates load_time).
-
recording_pauseExecutePause the current recording.
-
recording_resumeExecuteResume a paused recording.
-
recording_startExecuteStart recording.
-
recording_stopExecuteStop the current recording.
-
render_executeExecuterender_execute
-
render_execute_streamExecuterender_execute_stream
-
scene_switchExecuteSwitch the active/live scene.
-
script_set_codeExecutescript_set_code
-
session_closeExecuteClose a CLI-Anything REPL session.
-
session_createExecuteCreate a persistent REPL session for a CLI-Anything harness.
-
session_sendExecutesession_send
-
stream_startExecuteStart streaming (requires stream_configure first).
-
stream_stopExecuteStop the current stream.
-
transform_flip_hExecuteFlip an element horizontally.
-
transform_rotateExecutetransform_rotate
-
transform_scaleExecutetransform_scale
-
transform_translateExecutetransform_translate
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.