High-risk tools in Dynamic

High severity Dynamic MCP Server 5 of 19 tools

5 of the 19 tools in Dynamic are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

dynamic.tool.enable Execute

Enable or disable a dynamic tool at runtime
run_js_ephemeral Execute

Execute one-off Node.js code in the configured execution sandbox (Docker preferred, Node fallback) without persisting a tool
sandbox.exec Execute

Run one or more shell commands in an active sandbox session
sandbox.initialize Execute

Create a reusable container session for iterative commands and scripts
sandbox.run_js Execute

Install dependencies and run JavaScript in an existing sandbox session

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Dynamic

Tools at high risk

Attacks that target this class

More on Dynamic

Enforce policy on every Dynamic tool call.