High-risk tools in UI Bridge MCP

High severity UI Bridge MCP MCP Server 50 of 149 tools

50 of the 149 tools in UI Bridge MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

sdk_ai_execute Execute

sdk_ai_execute
sdk_blur Execute

Remove focus from an element in the SDK app.
sdk_change_buffer_disable Execute

Disable change buffering.
sdk_change_buffer_enable Execute

Enable change buffering. All diffs are accumulated until drained.
sdk_click Execute

sdk_click
sdk_double_click Execute

Double-click an element in the SDK app.
sdk_drag Execute

Drag an element to a target in the SDK app.
sdk_execute_with_diff Execute

Execute an element action and capture what changed in the UI. Returns before/after diff with categorization.
sdk_focus Execute

Focus an element in the SDK app.
sdk_hover Execute

Hover over an element in the SDK app.
sdk_media_audit_performance Execute

sdk_media_audit_performance
sdk_page_go_back Execute

sdk_page_go_back
sdk_page_go_forward Execute

sdk_page_go_forward
sdk_page_navigate Execute

sdk_page_navigate
sdk_page_refresh Execute

sdk_page_refresh
sdk_redo Execute

Execute redo in the connected SDK app. Uses the app
sdk_right_click Execute

Right-click an element in the SDK app.
sdk_scroll Execute

Scroll within an element in the SDK app.
sdk_select Execute

Select an option in a dropdown in the SDK app.
sdk_submit Execute

Submit the form containing the element in the SDK app.
sdk_toggle Execute

Toggle a checkbox in the SDK app.
sdk_type Execute

sdk_type
sdk_undo Execute

Execute undo in the connected SDK app. Uses the app
sdk_wait_for_change Execute

Wait for the UI to change matching a predicate. Polls until a matching change is detected or timeout.
sdk_wait_for_network_request Execute

sdk_wait_for_network_request
ui_blur Execute

Remove focus from an element in the runner
ui_change_buffer_drain Execute

Drain the change buffer in the runner
ui_check Execute

Check a checkbox element in the runner
ui_click Execute

ui_click
ui_double_click Execute

Double-click an element in the runner
ui_drag Execute

ui_drag
ui_execute_with_diff Execute

Execute an element action in the runner
ui_fill_form Execute

ui_fill_form
ui_focus Execute

Focus an element in the runner
ui_hover Execute

Hover over an element in the runner
ui_page_evaluate Execute

ui_page_evaluate
ui_redo Execute

Execute redo in the runner
ui_right_click Execute

Right-click an element in the runner
ui_scroll Execute

Scroll within an element in the runner
ui_select Execute

Select an option in a dropdown/select element in the runner
ui_submit Execute

Submit the form containing the element in the runner
ui_toggle Execute

Toggle a checkbox element in the runner
ui_type Execute

ui_type
ui_uncheck Execute

Uncheck a checkbox element in the runner
ui_undo Execute

Execute undo in the runner
ui_wait_for_change Execute

Wait for the runner
ui_wait_for_network_request Execute

ui_wait_for_network_request
wait_for_idle Execute

wait_for_idle
wait_for_signal Execute

wait_for_signal
wait_for_targets Execute

wait_for_targets

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in UI Bridge MCP

Tools at high risk

Attacks that target this class

More on UI Bridge MCP

Enforce policy on every UI Bridge MCP tool call.