High-risk tools in IRA-RESEARCHER

High severity IRA-RESEARCHER MCP Server 18 of 44 tools

18 of the 44 tools in IRA-RESEARCHER are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

ira_audit_accessibility Execute

Run accessibility audit
ira_click Execute

Click by index or coordinates
ira_drag Execute

Drag from one element to another
ira_go_back Execute

Go back in browser history
ira_go_forward Execute

Go forward in browser history
ira_hover Execute

Hover over an element
ira_intercept Execute

Block or passthrough network requests matching a URL pattern
ira_javascript Execute

Execute JavaScript in page
ira_keyboard Execute

Press keyboard shortcuts (Escape, Enter, Tab, arrows, Ctrl+C, etc.)
ira_navigate Execute

Navigate to a URL with auto-retry on empty DOM
ira_new_tab Execute

Open a new tab (optionally navigate to a URL)
ira_reload Execute

Reload the current page
ira_scroll Execute

Scroll the page
ira_select Execute

Select a dropdown option
ira_set_viewport Execute

Set browser viewport size (mobile, tablet, desktop)
ira_switch_tab Execute

Switch to a different tab
ira_type Execute

Type text into an input field
ira_wait Execute

Wait for seconds or element

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in IRA-RESEARCHER

Tools at high risk

Attacks that target this class

More on IRA-RESEARCHER

Enforce policy on every IRA-RESEARCHER tool call.