High-risk tools in RedisNexus

High severity RedisNexus MCP Server 23 of 169 tools

23 of the 169 tools in RedisNexus are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

argocd_sync Execute

Sync an ArgoCD application with fine-grained control: prune, dry-run, force.
aws_ec2 Execute

Manage EC2 instances: list, describe, start, stop, terminate, security groups.
aws_lambda Execute

Manage Lambda functions: list, describe, invoke, view logs.
docker_container_action Execute

Perform actions on containers: start, stop, restart, pause, kill, remove, inspect, top, stats.
gh_actions Execute

Manage GitHub Actions: list runs, view run details, trigger, cancel, rerun, view logs.
glab_pipelines Execute

Manage GitLab CI/CD pipelines: list, view, trigger, cancel, retry, delete.
k8s_apply Execute

Apply a YAML manifest to the cluster. Supports dry_run mode for safe preview.
k8s_deployment Execute

Manage Kubernetes deployments: inspect, scale, restart, rollback.
k8s_exec Execute

Execute a command inside a running pod container.
k8s_helm Execute

Manage Helm releases: list, install, upgrade, uninstall, status, history, rollback.
k8s_nodes Execute

List cluster nodes with status, capacity, and resource usage. Cordon/uncordon/drain nodes.
kafka_produce Execute

Produce messages to a Kafka topic with optional key, headers, and partition.
nginx_ssl_manage Execute

SSL certificate management: generate self-signed, certbot commands, check expiry.
nginx_test_config Execute

Test Nginx configuration syntax without applying.
pg_connections Execute

Manage PostgreSQL connections: list active, kill idle, view stats.
pg_query Execute

Execute a SQL query against PostgreSQL. Supports SELECT, INSERT, UPDATE, DELETE.
prom_query Execute

Execute instant or range PromQL queries against Prometheus.
redis_pipeline_execute Execute

Execute multiple Redis commands in a single pipeline for maximum performance.
rmq_consume Execute

rmq_consume
sys_cron Execute

Manage cron jobs: list, add, remove, and AI-generate cron expressions.
sys_service Execute

Manage systemd services: list, status, start, stop, restart, enable, disable, logs.
tf_apply Execute

Apply Terraform changes. Requires confirmation.
tf_plan Execute

Run terraform plan to preview infrastructure changes.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in RedisNexus

Tools at high risk

Attacks that target this class

More on RedisNexus

Enforce policy on every RedisNexus tool call.