High-risk tools in Visual Annotation MCP
18 of the 36 tools in Visual Annotation MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
check_uncheckExecuteCheck or uncheck a checkbox/radio using selector or element id.
-
click_by_roleExecuteClick by accessible role and optional name.
-
click_by_selectorExecuteClick the first element matching a CSS selector.
-
click_by_textExecuteClick the first actionable interactive element whose text/label matches.
-
click_elementExecuteClick an inspected element id, waiting for it to become actionable first.
-
close_cookie_bannerExecuteBest-effort cookie banner dismissal helper.
-
dismiss_common_popupsExecuteBest-effort dismiss of cookie/modals using common labels and close icons.
-
dismiss_overlayExecuteDismiss an overlay via selector or auto heuristics (+ optional Escape).
-
highlight_elementExecutehighlight_element
-
navigateExecuteGo to a URL (HTTP/S). Clears element ids from a previous inspect.
-
press_keyExecutePress a keyboard key (for example: Enter, Escape, Tab).
-
run_flowExecuteExecute a multi-step interaction flow (legacy alias).
-
run_flow_v2Executerun_flow_v2
-
select_optionExecuteSelect option on a <select> by value/label/index using selector or element id.
-
submit_formExecuteSubmit a form by form selector/id or clicking submit-capable element.
-
wait_for_selectorExecuteWait for a selector to reach attached/detached/visible/hidden state.
-
wait_for_textExecuteWait for text to become visible globally or under a selector scope.
-
wait_for_urlExecuteWait until current URL contains the given fragment (useful between flow steps).
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.