High-risk tools in Sentinel MCP Server

High severity Sentinel MCP Server MCP Server 9 of 10 tools

9 of the 10 tools in Sentinel MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

run_api_fuzzing Execute

Run API Fuzzing using Schemathesis.
run_cis_compliance_scan Execute

Run CIS Benchmark scan using Trivy.
run_crypto_scan Execute

Run SSL/TLS Compliance Scan (testssl.sh).
run_dast_scan Execute

Run DAST scan using OWASP ZAP.
run_malware_scan Execute

Run Malware scan using ClamAV.
run_sast_scan Execute

Run SAST scan using Semgrep.
run_sca_scan Execute

Run SCA scan using Trivy and Grype (Unified).
run_secret_scan Execute

Run Secret scan using Gitleaks.
run_threat_modeling Execute

Generate a STRIDE Threat Model (AI-Powered) based on code context.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Sentinel MCP Server

Tools at high risk

Attacks that target this class

More on Sentinel MCP Server

Enforce policy on every Sentinel MCP Server tool call.