High-risk tools in macOS Simulator MCP Server
10 of the 28 tools in macOS Simulator MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
waitExecutePause execution for a specified duration in milliseconds to allow time for UI updates, animations, network requests, or application responses. Critical for reliable automation t...
-
wait_for_elementExecuteWait for specific text or UI element to appear on screen before continuing. Essential for handling dynamic content, loading screens, and asynchronous UI updates. Polls the scree...
-
focus_windowExecuteBring a specific window to the foreground and make it the active/focused window using partial title matching. Essential for directing keyboard and mouse input to the correct app...
-
hoverExecuteHover the mouse over specific coordinates for a duration. Useful for triggering tooltips, dropdown menus, or hover states in UI elements. The mouse will remain at the specified ...
-
clickExecutePerform mouse clicks at precise screen coordinates with support for left, right, or middle mouse buttons. Essential for interacting with UI elements, buttons, menus, and any cli...
-
key_pressExecuteExecute keyboard shortcuts and special key combinations essential for system navigation and application control. Supports single keys (Enter, Escape, Tab, Arrow keys) and modifi...
-
mouse_moveExecuteMove the mouse cursor to precise screen coordinates without clicking. Useful for hover actions, preparing for subsequent clicks, or triggering hover-based UI elements like toolt...
-
right_clickExecuteRight-click at specific coordinates to open context menus. Equivalent to click with button=
-
scrollExecuteScroll in any direction within the current window or a specific region. Essential for navigating long documents, lists, or web pages. Supports both mouse wheel scrolling and tra...
-
type_textExecuteSimulate keyboard typing to input text into the currently focused application or text field. Supports all standard characters, numbers, symbols, and Unicode text. Use adjustable...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.