High-risk tools in Browser

High severity Browser MCP Server 32 of 63 tools

32 of the 63 tools in Browser are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

browser_click Execute

Click an element on the page using Playwright selector (see browser_docs)
browser_console_start Execute

Start capturing browser console logs (console.log, console.error, console.warn, etc.) (see browser_docs)
browser_control_media Execute

Control a media element (play, pause, seek, mute) (see browser_docs)
browser_evaluate Execute

Execute JavaScript in the browser context (see browser_docs)
browser_focus Execute

Focus an element (see browser_docs)
browser_go_back Execute

Navigate back in history (see browser_docs)
browser_go_forward Execute

Navigate forward in history (see browser_docs)
browser_hover Execute

Hover over an element (see browser_docs)
browser_mouse_click Execute

Click the mouse at specific coordinates or on current position (see browser_docs)
browser_mouse_drag Execute

Drag from one position to another (see browser_docs)
browser_mouse_move Execute

Move the mouse to specific coordinates (see browser_docs)
browser_mouse_wheel Execute

Scroll the mouse wheel (see browser_docs)
browser_navigate Execute

Navigate to a URL in the browser (see browser_docs)
browser_net_emulate_conditions Execute

Emulate network conditions (throttling) (see browser_docs)
browser_net_set_request_blocking Execute

Block requests matching URL patterns (see browser_docs)
browser_net_start_monitoring Execute

Start monitoring network requests with detailed timing (see browser_docs)
browser_net_stop_monitoring Execute

Stop network monitoring and clear request log (see browser_docs)
browser_new_page Execute

Open a new browser page (tab) (see browser_docs)
browser_perf_start_coverage Execute

Start tracking CSS and JavaScript code coverage (see browser_docs)
browser_perf_start_profile Execute

Start CPU profiling to track JavaScript execution (see browser_docs)
browser_perf_stop_profile Execute

Stop CPU profiling and get profile data (see browser_docs)
browser_press_key Execute

Send a keyboard event (press a key) (see browser_docs)
browser_reload Execute

Reload the current page (see browser_docs)
browser_resize_window Execute

Resize the browser window (useful for testing responsiveness) (see browser_docs)
browser_scroll Execute

Scroll the page (see browser_docs)
browser_sec_stop_csp_monitoring Execute

Stop CSP monitoring and clear violations (see browser_docs)
browser_select Execute

Select options in a dropdown (see browser_docs)
browser_start_video_recording Execute

Start recording browser session as video (see browser_docs)
browser_switch_page Execute

Switch to a different browser page (tab) (see browser_docs)
browser_type Execute

Type text into an input field (see browser_docs)
browser_wait Execute

Pause execution for a duration (see browser_docs)
browser_wait_for_selector Execute

Wait for an element to appear on the page (see browser_docs)

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Browser

Tools at high risk

Attacks that target this class

More on Browser

Enforce policy on every Browser tool call.