High-risk tools in Kef

High severity Kef MCP Server 15 of 21 tools

15 of the 21 tools in Kef are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

cast_pause Execute

Pause the current Cast playback on the KEF.
cast_resume Execute

Resume paused Cast playback on the KEF.
cast_stop Execute

Stop Cast playback on the KEF and close the Cast receiver.
cast_url Execute

Play a direct audio stream URL on the KEF via Google Cast.
kef_next Execute

Skip to the next track on the KEF.
kef_play_pause Execute

Toggle play/pause on the KEF.
kef_power_on Execute

Wake the KEF speakers from standby.
kef_previous Execute

Go to the previous track on the KEF.
kef_set_volume Execute

Set the KEF hardware volume (0-100).
kef_standby Execute

Put the KEF speakers into standby (off).
play_from_youtube Execute

play_from_youtube
play_on_kef Execute

play_on_kef
play_radio Execute

Play internet radio / a direct stream URL on the KEF via Google Cast.
spotify_pause Execute

Pause Spotify playback.
spotify_skip Execute

Skip to the next Spotify track.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Kef

Tools at high risk

Attacks that target this class

More on Kef

Enforce policy on every Kef tool call.