High-risk tools in KiCAD-MCP-Server
13 of the 247 tools in KiCAD-MCP-Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
autorouteExecuteRun Freerouting autorouter on the current PCB. Exports to Specctra DSN, runs Freerouting CLI, and imports the routed SES result. Requires freerouting.jar and the Java version it...
-
export_3d_cliExecuteExport a 3D model of the PCB via kicad-cli. The
-
export_drillExecuteGenerate drill files for a PCB via kicad-cli, exposing the full Excellon/Gerber drill option set (format, drill origin, zero suppression, oval format, units, mirror-Y, minimal h...
-
kicad_gui_clickExecuteActivate a menu item or AUI toolbar tool by name (as shown by kicad_gui_tree). Executes immediately — no gating.
-
kicad_gui_click_atspiExecuteBackend B: activate the first accessible node matching
-
kicad_gui_wait_forExecutePoll until a shown top-level window whose title contains
-
kicad_reload_and_open_pluginExecuteGUI playbook (plugin dev/test loop): trigger Refresh Plugins, then open the named External-Plugins entry.
-
kicad_run_action_pluginExecuteFind the Tools > External Plugins submenu entry with the given name (e.g.
-
kicad_run_drcExecuteGUI playbook: open the Design Rules Checker dialog, click
-
launch_kicad_uiExecuteLaunch KiCAD UI, optionally with a project file
-
refill_zonesExecuteRefill all copper zones on the board. WARNING: SWIG path has known segfault risk (see KNOWN_ISSUES.md). Prefer using IPC backend (KiCAD open) or triggering zone fill via KiCAD U...
-
run_drcExecuteRun the KiCAD Design Rule Check (DRC) on the current PCB and return violations. Optionally save the report to a file.
-
run_ercExecuteRuns the KiCAD Electrical Rules Check (ERC) on a schematic and returns all violations. Use after wiring to verify the schematic before generating a netlist.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.