High-risk tools in CloudStack MCP Server
29 of the 442 tools in CloudStack MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
confirm_dangerous_actionExecuteConfirm a dangerous action that requires explicit user approval
-
declare_host_as_degradedExecuteDeclare host as degraded
-
deploy_virtual_machineExecuteDeploy a new virtual machine in CloudStack with comprehensive configuration options
-
migrate_system_vmExecuteMigrate system VM to another host
-
migrate_virtual_machineExecuteMigrate a virtual machine to another host
-
migrate_vm_with_volumeExecuteMigrate virtual machine with volumes
-
migrate_vpcExecuteMigrate VPC to different zone
-
patch_system_vmExecutePatch system virtual machine
-
prepare_host_for_maintenanceExecutePut host in maintenance mode
-
reboot_routerExecuteReboot a virtual router
-
reboot_system_vmExecuteReboot a system virtual machine
-
reboot_virtual_machineExecuteReboot a virtual machine
-
reconnect_hostExecuteReconnect disconnected host
-
reset_vpn_connectionExecuteReset a VPN connection
-
restart_networkExecuteRestart network with cleanup
-
restart_vpcExecuteRestart a Virtual Private Cloud
-
restart_vpn_gatewayExecuteRestart VPN gateway service
-
scale_kubernetes_clusterExecuteScale a Kubernetes cluster up or down
-
scale_system_vmExecuteScale system VM resources
-
scale_virtual_machineExecuteScale virtual machine CPU/memory
-
start_kubernetes_clusterExecuteStart a Kubernetes cluster
-
start_routerExecuteStart a virtual router
-
start_system_vmExecuteStart a system virtual machine
-
start_virtual_machineExecuteStart a stopped virtual machine with advanced deployment options
-
stop_kubernetes_clusterExecuteStop a running Kubernetes cluster
-
stop_routerExecuteStop a virtual router
-
stop_system_vmExecuteStop a system virtual machine
-
stop_virtual_machineExecuteStop a running virtual machine
-
upgrade_kubernetes_clusterExecuteUpgrade a Kubernetes cluster to a different version
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.