High-risk tools in Spotify
20 of the 544 tools in Spotify are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
artistwatch_new_additionsExecuteWatches your FOLLOWED artists for new material: walks /me/following, probes each artist\
-
base62_to_uriExecuteReinterpret a base62 ID string as a Spotify entity ID and build the full spotify: URI for a given kind, offline.
-
batch_parse_spotify_urisExecuteParse a batch of Spotify references into kind/ID parts in one local pass — no network calls; one result row per input.
-
collab_mix_from_followedExecuteBuild a collaborative-style mix playlist from your FOLLOWED artists\
-
jump_to_chapterExecuteStart playing a specific audiobook chapter (1-based number) by resuming the audiobook context at that chapter. Use dry_run to preview without touching playback.
-
listening_session_reportExecuteReport a listening session (or the most recent one when no id is given): duration, start/end snapshots and closed status. Read-only.
-
listening_session_startExecuteStart a local listening-session log: captures the current playback snapshot into a session file under the backup dir; close it later with listening_session_close. Writes only a ...
-
new_music_from_saved_artistsExecuteNewest releases across the artists you follow (and optionally those in your saved albums), sorted by release date — your personal new-release feed. Quota: 🔴 followed-artist wal...
-
new_music_from_top_artistsExecuteFresh-music digest from YOUR listening: probes the latest release of each of your top artists (from
-
parse_spotify_uriExecuteParse a single spotify: URI into its entity kind and ID parts without any network call; reports validity and a parse error when malformed.
-
playExecuteStart or resume playback. Optionally target specific content.
-
play_atExecuteStart playback at a specific position — accepts H:MM:SS / MM:SS / seconds string or position_ms. Wraps PUT /me/player/play with offset/position_ms. 🟢 (1 write).
-
playlist_sliceExecuteCopy a slice of one playlist — positions start..end, first/last N, or an added-at date
-
playlist_table_of_contentsExecuteBuild a table of contents for a playlist: totals, runtime, and
-
shows_without_new_episodesExecuteFind saved shows with no episode released inside the lookback window (
-
spotify_doctorExecuteRun local diagnostics: token presence/expiry, auth-time scopes vs write tools enabled by active toolsets, Premium gating notes, rate-limit cooldown, and a config snapshot. Read-...
-
start_podcast_sessionExecutePlan a podcast session (see plan_podcast_session) and start it on a device. Limitation: Spotify cannot apply resume offsets when queueing — only the first episode can start at i...
-
top_genre_censusExecuteBuild a weighted genre census from your top artists (rank-weighted across the three windows; genres resolved via the batch /artists endpoint, default 40 artists per window). Quo...
-
undo_previewExecuteDry-run for undo_mutation: shows exactly what a receipt-driven revert WOULD do (diff of
-
whats_newExecutePersonal new-releases radar: derive what
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.