High-risk tools in Trace

High severity Trace MCP Server 3 of 191 tools

3 of the 191 tools in Trace are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

call_project_tool Execute

Relay a trace-mcp tool call to a DIFFERENT registered project than this session
reindex Execute

Trigger (re)indexing of the project or a subdirectory. Mutates the local index (SQLite). Use after major file changes; for single-file updates prefer register_edit instead. The ...
visualize_graph Execute

Open interactive HTML graph in browser showing file/symbol dependencies. Supports force/hierarchical/radial layouts, community coloring. Use granularity=symbol to see individual...

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Trace

Tools at high risk

Attacks that target this class

More on Trace

Enforce policy on every Trace tool call.