High-risk tools in Mcp Hands
16 of the 378 tools in Mcp Hands are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
gif_from_imagesExecuteBuild an animated GIF from images (duration_ms per frame, loop=0 means forever).
-
git_runExecuteRun git with a JSON list of extra arguments, e.g. [\
-
image_scale_2xExecuteUpscale an image by a factor with LANCZOS resampling.
-
job_startExecuteStart a background job that keeps running after you answer. Either one tool call,
-
job_waitExecuteWait up to N seconds for a job to finish, then report it (short jobs only).
-
pptx_from_outlineExecuteBuild a .pptx from
-
run_cmdExecuteRun a command through cmd.exe /c (Windows) or /bin/sh -c.
-
run_psExecuteRun a PowerShell script and return its output.
-
run_pythonExecuteRun a short Python snippet in a temp file and return its stdout/stderr.
-
serve_dirExecuteStart a background threaded HTTP server over a folder (read-only listing plus the _share folder).
-
sqlite_executeExecuteRun one writing/DDL statement and report rows affected.
-
start_processExecuteLaunch a program or document without waiting for it.
-
startup_itemsExecutePrograms that start with Windows (registry Run keys + the startup folder).
-
stop_serverExecuteStop one running file server by port, or every server when port=0.
-
task_detailsExecuteFull schtasks /query /v listing for one task: triggers, run-as user, action and state.
-
task_runExecuteDESTRUCTIVE: start a scheduled task right now, ignoring its schedule (schtasks /run).
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.