High-risk tools in MCP Camoufox

High severity MCP Camoufox MCP Server 47 of 102 tools

47 of the 102 tools in MCP Camoufox are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

batch_actions Execute

Execute multiple actions in one call. Each action: {type, ref?, value?, text?, key?, url?}.
browser_launch Execute

Launch Camoufox stealth browser and navigate to URL. Browser persists between calls.
evaluate Execute

Execute JavaScript in page context.
frame_evaluate Execute

Execute JavaScript inside a specific frame/iframe.
mouse_record Execute

Start recording mouse positions (call mouse_replay later). Returns recorder handle.
navigate Execute

Navigate to a URL.
navigate_and_snapshot Execute

Navigate to URL then return snapshot — combined in one call.
network_start Execute

Start capturing network requests. With capture_bodies=true also records request/response
session_warmup Execute

Visit innocuous public sites (Google, Wikipedia) to build browsing history before targeting protected site. Helps with CF/DataDome IP scoring.
tab_new Execute

Open new tab.
wait_and_snapshot Execute

Wait for selector/text then return snapshot. Combines wait_for + browser_snapshot in one call.
wait_for Execute

Wait for element/text to appear or disappear.
wait_for_any_of Execute

Race multiple wait conditions — returns the first that matches, so the agent can branch immediately without sequential probes.
wait_for_navigation Execute

Wait for page load to complete.
wait_for_network_idle Execute

Wait until network is idle for N ms (no in-flight requests). Better than fixed timeouts for SPAs.
wait_for_response Execute

Wait for a network response matching a URL pattern.
wait_for_url Execute

Wait for URL to match a pattern.
back_and_snapshot Execute

Navigate back + return snapshot.
check Execute

Check checkbox or radio button.
reload_and_snapshot Execute

Reload page + return snapshot.
storage_state_load Execute

Load cookies + localStorage from a JSON file (created by storage_state_save). Bypass CF/login if session is fresh.
click Execute

Click element by ref ID from browser_snapshot. Auto JS-fallback for overlays.
click_and_snapshot Execute

Click element by ref + wait + return snapshot. Perfect for buttons that trigger navigation/dialog.
click_and_wait Execute

Click element then wait for navigation or selector. Atomic — fewer roundtrips than separate click + wait_for.
click_role Execute

Click element by ARIA role and name.
click_text Execute

Click element by visible text.
click_turnstile Execute

Auto-find and click Cloudflare Turnstile checkbox. Port of mcp-stealth-chrome
dialog_handle Execute

Set handler for next alert/confirm/prompt.
drag_and_drop Execute

Drag from one element to another.
go_back Execute

Navigate back in history.
go_forward Execute

Navigate forward in history.
hover Execute

Hover over element by ref ID.
humanize_click Execute

Click element with humanized mouse approach (3-step Bezier-like curve before click). Use for anti-bot pages.
humanize_type Execute

Type text with Gaussian-distributed delays between keystrokes (mean ~80ms, sigma ~30ms). Mimics human typing rhythm.
inject_init_script Execute

Inject a script that runs before every page load.
login_classic Execute

Composite login for classic email→password forms (Google, Microsoft, generic SSO).
mouse_click_xy Execute

Click at exact x,y coordinates. steps>0 adds interpolated pre-movement (human-like).
mouse_drift Execute

Random mouse movements over a duration — builds up mouse history before action (CF/DataDome behavior analysis).
mouse_move Execute

Move mouse to x,y. steps>0 interpolates path (human-like).
mouse_replay Execute

Replay last recorded mouse path with original timing.
press_key Execute

Press key or combo (Enter, Escape, Control+a, etc.).
reload Execute

Reload the current page.
scroll Execute

Scroll the page.
select_option Execute

Select option from <select> dropdown.
set_viewport_size Execute

Set viewport width and height.
tab_select Execute

Switch to a tab by index, or by url_contains (first tab whose URL contains the substring).
type_text Execute

Type text char by char via keyboard.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in MCP Camoufox

Tools at high risk

Attacks that target this class

More on MCP Camoufox

Enforce policy on every MCP Camoufox tool call.