High-risk tools in Cmux Agent

High severity Cmux Agent MCP Server 29 of 63 tools

29 of the 63 tools in Cmux Agent are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

cmux_browser_console Execute

Get or clear browser console logs/errors.
cmux_batch Execute

Execute multiple CMUX operations in a single MCP call. Each step references an existing cmux tool by name and provides its parameters. Steps run sequentially. Later steps can re...
cmux_browser_eval Execute

Execute JavaScript in the browser page.
cmux_browser_navigate Execute

Navigate the browser: goto a URL, or go back/forward/reload.
cmux_browser_wait Execute

Wait for a condition in the browser (selector, text, URL, load state).
cmux_new_pane Execute

Create a new pane (terminal or browser) in a workspace. Returns the new surface ref.
cmux_new_split Execute

Split an existing pane. Returns the new surface ref and updated pane count. -
cmux_new_surface Execute

Create a new surface (tab) — terminal or browser.
cmux_new_window Execute

Create a new window. Returns the window ref.
cmux_respawn_pane Execute

Restart a pane process.
cmux_start Execute

Launch CMUX if not already running. Opens the cmux.app.
cmux_browser_click Execute

Click an element in the browser.
cmux_browser_fill Execute

Fill an input field in the browser.
cmux_browser_open Execute

Open a browser surface (split in the current workspace).
cmux_browser_tab Execute

Manage browser tabs (new, list, switch, close).
cmux_browser_type Execute

Type text into an element in the browser (key by key).
cmux_drag_surface_to_split Execute

Move a tab into a split position — turns a tab into its own pane by dragging it to a side. Does not close the tab.
cmux_focus_pane Execute

Focus a specific pane.
cmux_focus_window Execute

Focus a specific window.
cmux_join_pane Execute

Join a pane into another pane — merges two split panes together without closing either. The opposite of break-pane.
cmux_resize_pane Execute

Resize a pane in a direction.
cmux_select_workspace Execute

Switch to a specific workspace.
cmux_send Execute

Send text to a surface without pressing Enter. Works on all surface types (plain terminals and AI CLI agents).
cmux_send_key Execute

Send a key press to a surface (enter, tab, escape, backspace, delete, up, down, left, right, ctrl+c, etc.). Works on all surface types.
cmux_send_key_all Execute

Send a key (e.g., ctrl+c, escape) to ALL panes in a workspace. Useful for cancelling all agents.
cmux_send_panel Execute

Send text to a specific panel.
cmux_send_submit Execute

Send text and press Enter to a surface. Works on all surface types (plain terminals and AI CLI agents).
cmux_send_submit_some Execute

Send the same text + Enter to SPECIFIC surfaces (not all). Target by surface refs — useful when only some agents need the same instruction.
cmux_session_recover Execute

Recover a crashed CMUX session from the saved manifest. Recreates all workspaces, panes, and RESUMES each CLI

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Cmux Agent

Tools at high risk

Attacks that target this class

More on Cmux Agent

Enforce policy on every Cmux Agent tool call.