High-risk tools in Agent Bus

High severity Agent Bus MCP Server 3 of 65 tools

3 of the 65 tools in Agent Bus are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

ask Execute

Send a question and BLOCK until a reply arrives (or timeout). Capped at 110s.
ask_best Execute

Route an ask to the most recently-active agent that has the given capability.
wait_for_task Execute

Wait up to 110s for a task update/event/message/test result, then return task_result plus holder, latest activity, timeout flag, and next actions.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Agent Bus

Tools at high risk

Attacks that target this class

More on Agent Bus

Enforce policy on every Agent Bus tool call.