High-risk tools in Mcp Control Plane

High severity Mcp Control Plane MCP Server 81 of 286 tools

81 of the 286 tools in Mcp Control Plane are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

activate_window Execute

Activate the first top-level window whose title contains the given text.
admin_run Execute

Run an allowlisted elevated Windows admin action through the scheduled-task broker.
api_sentence Execute

Run a raw RouterOS API sentence, for example ['/system/resource/print'].
apply_unified_patch_remote Execute

Apply a unified diff on the remote server without shell quoting issues.
apt_maintenance Execute

Run apt update plus optional upgrade/autoremove/autoclean.
call_service Execute

Call a Home Assistant service, for example domain='light', service='turn_on'.
click Execute

Click at the current position or at supplied screen coordinates.
click_at Execute

Move to screen coordinates, click, and optionally return to the original cursor position.
click_in_window Execute

Click at coordinates relative to a matching window's top-left corner.
comfy_generate_from_asset Execute

Queue an API-format ComfyUI workflow asset, optionally overriding common SDXL fields.
comfy_interrupt Execute

Interrupt the current ComfyUI generation.
comfy_restart Execute

Restart ComfyUI and wait until its local HTTP API responds.
deck_exec Execute

Run an explicit shell command on the Steam Deck over SSH.
deck_probe Execute

Check SSH connectivity and confirm basic SteamOS/Linux identity.
dns_test Execute

Measure DNS resolution timing from Windows.
docker_compose Execute

Run docker compose/docker-compose in a directory. Use for ps, logs, pull, up -d, restart, etc.
docker_container_action Execute

Run a safe Docker container action: start, stop, restart, pause, unpause, or kill.
docker_exec Execute

Execute a shell command inside a Docker container.
double_click Execute

Double-click at the current position or at supplied screen coordinates.
drag_to Execute

Drag the mouse to screen coordinates.
focus_window_win32 Execute

Restore and focus a top-level window using Win32 APIs.
hold_key Execute

Hold a keyboard key for a duration in milliseconds, then release it.
hotkey Execute

Press a key combination, for example ['ctrl', 'l'].
install_flatpak_emulators Execute

Install selected emulator Flatpaks from Flathub by friendly name or app id.
key_down Execute

Press and hold a keyboard key until key_up is called.
key_up Execute

Release a keyboard key.
launch_app Execute

Launch a local Windows application.
launch_desktop_app Execute

Launch a desktop command or Flatpak app in the active Steam Deck desktop session.
maximize_window Execute

Maximize a top-level window whose title contains the given text.
media_player Execute

Control a media_player: play, pause, stop, next, previous, mute, unmute, volume_set.
minimize_window Execute

Minimize a top-level window whose title contains the given text.
move_mouse Execute

Move the mouse pointer to screen coordinates.
nextcloud_occ Execute

Run a Nextcloud occ command as www-data, for example: status or app:list.
notify_deck Execute

Show a desktop notification on the Deck.
open_emudeck_download_page Execute

Open the official EmuDeck website in the Deck desktop session for interactive install.
open_url Execute

Open a URL or file association through Windows Shell, optionally focusing a matching window.
paste_text Execute

Paste text into the active control using the clipboard.
paste_url_in_window Execute

Focus a browser-like window, paste URL into the address bar, and press Enter.
ping Execute

Run RouterOS ping over SSH.
postgres_query Execute

Run a PostgreSQL query as postgres.
powershell Execute

Run a local PowerShell command. Keep commands focused and non-interactive.
powershell_encoded Execute

Run local PowerShell using -EncodedCommand with UTF-16LE base64.
powershell_script Execute

Run a local multi-line PowerShell script from a temporary UTF-8 .ps1 file.
powershell_script_utf8 Execute

Run a local multi-line PowerShell script and capture output as UTF-8.
press Execute

Press one keyboard key.
rebuild_search_index Execute

Rebuild Context Store FTS index for documents, facts, and runbooks.
reposition_window Execute

Move a top-level window while keeping its current size.
resize_window Execute

Resize a top-level window while keeping its current top-left position.
restart_steam_game_mode Execute

Restart Steam in Game Mode. This interrupts the current Steam UI session.
restore_window Execute

Restore a top-level window whose title contains the given text.
run Execute

Run a terminal-like RouterOS command through the API, for example '/system resource print'.
run_command Execute

Run a bash command on the Ubuntu server as the SSH user.
run_powershell Execute

Run a local PowerShell command and return stdout/stderr.
run_python_script Execute

Upload a temporary UTF-8 Python script and execute it with python3.
run_recipe Execute

Run a built-in worker recipe such as server_quick or network_quick.
run_script Execute

Upload a temporary bash script to the Ubuntu server and execute it.
run_sudo_command Execute

Run a bash command on the Ubuntu server through sudo.
run_tasks Execute

Submit independent worker tasks and wait for their results.
scroll Execute

Scroll the active window. Positive values scroll up, negative values scroll down.
scroll_in_window Execute

Scroll inside a matching window using optional relative coordinates.
service_control Execute

Run systemctl action for a service: status, restart, reload, start, stop, enable, disable.
set_window_bounds_win32 Execute

Move and resize a top-level window using Win32 APIs.
ssh Execute

Run a RouterOS command over SSH using MIKROTIK_* credentials.
start_homeassistant_tunnel Execute

Start a persistent SSH tunnel for Home Assistant: localhost -> Ubuntu localhost:8123.
start_implementation_branch Execute

Start a bounded implementation branch in an isolated git worktree.
steam_rom_manager_add Execute

Run Steam ROM Manager add. Steam should be closed while shortcuts are written.
stop_tunnel Execute

Stop a managed local tunnel.
submit_durable_tasks Execute

Submit a worker batch behind an internal durable task handle.
submit_tasks Execute

Submit independent worker tasks and return immediately with a batch id.
toggle Execute

Toggle an entity through homeassistant.toggle.
traceroute Execute

Run RouterOS traceroute over SSH.
turn_off Execute

Turn off an entity through homeassistant.turn_off.
turn_on Execute

Turn on an entity through homeassistant.turn_on.
type_text Execute

Type text into the active control.
wait_batch Execute

Wait for a worker batch to finish or until timeout.
wait_for_window Execute

Wait until a visible top-level window title contains title_substring.
window_action_win32 Execute

Run a Win32 window action: minimize, maximize, restore, close.
ws_command Execute

Run a raw Home Assistant WebSocket command.
yandex_station_command Execute

Send a native command to a Yandex.Station media_player entity.
yandex_station_say Execute

Make a Yandex.Station say text through the sendText command.
yandex_station_say_by_name Execute

Make a Yandex media_player say text by friendly name or entity_id substring.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Mcp Control Plane

Tools at high risk

Attacks that target this class

More on Mcp Control Plane

Enforce policy on every Mcp Control Plane tool call.