High-risk tools in OBS MCP Server
56 of the 200 tools in OBS MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
obs-start-outputExecuteStarts an output
-
obs-start-recordExecuteStarts the record output
-
obs-start-replay-bufferExecuteStarts the replay buffer output
-
obs-start-streamExecuteStart streaming in OBS
-
obs-start-virtual-camExecuteStarts the virtualcam output
-
obs-stop-outputExecuteStops an output
-
obs-stop-recordExecuteStops the record output
-
obs-stop-replay-bufferExecuteStops the replay buffer output
-
obs-stop-streamExecuteStop streaming in OBS
-
obs-stop-virtual-camExecuteStops the virtualcam output
-
obs-trigger-hotkey-by-key-sequenceExecuteTriggers a hotkey using a sequence of keys
-
obs-trigger-hotkey-by-nameExecuteTriggers a hotkey using its name
-
obs-trigger-media-input-actionExecuteTriggers an action on a media input
-
obs-trigger-studio-transitionExecuteTrigger a transition from preview to program scene in Studio Mode
-
obs-trigger-transitionExecuteTrigger a scene transition in OBS (Studio Mode must be enabled)
-
start_recordExecuteStarts the record output.
-
start_replay_bufferExecuteStarts the replay buffer output.
-
start_streamExecuteStarts the stream output.
-
start_virtual_camExecuteStarts the virtual camera output.
-
stop_recordExecuteStops the record output. Returns: Dict containing the output path of the stopped recording
-
stop_replay_bufferExecuteStops the replay buffer output.
-
stop_streamExecuteStops the stream output.
-
stop_virtual_camExecuteStops the virtual camera output.
-
trigger_hotkey_by_key_sequenceExecutetrigger_hotkey_by_key_sequence
-
trigger_hotkey_by_nameExecuteTriggers a hotkey using its name. Args: hotkey_name: Name of the hotkey to trigger
-
trigger_studio_mode_transitionExecuteTriggers the current scene transition. Only available when studio mode is enabled.
-
call_vendor_requestExecuteCall a request registered to a vendor. Args: vendor_name: Name of the vendor to use request_type: The request type to call request_data: Additio...
-
obs-broadcast-custom-eventExecuteBroadcasts a CustomEvent to all WebSocket clients
-
obs-call-vendor-requestExecuteCall a request registered to a vendor
-
obs-pause-recordExecutePauses the record output
-
obs-sleepExecuteSleeps for a time duration or number of frames
-
obs-split-record-fileExecuteSplits the current file being recorded into a new file
-
obs-toggle-outputExecuteToggles the status of an output
-
obs-toggle-recordExecuteToggles the status of the record output
-
obs-toggle-record-pauseExecuteToggles pause on the record output
-
obs-toggle-replay-bufferExecuteToggles the state of the replay buffer output
-
obs-toggle-streamExecuteToggle the streaming state in OBS
-
obs-toggle-virtual-camExecuteToggles the state of the virtualcam output
-
pause_recordExecutePauses the record output.
-
toggle_recordExecuteToggles the status of the record output. Returns: Whether the output is active after toggling
-
toggle_record_pauseExecuteToggles pause on the record output. Returns: Whether the output is paused after toggling
-
toggle_replay_bufferExecuteToggles the state of the replay buffer output. Returns: Whether the output is active after toggling
-
toggle_streamExecuteToggles the status of the stream output. Returns: Whether the output is active after toggling
-
toggle_virtual_camExecuteToggles the state of the virtual camera output. Returns: Whether the output is active after toggling
-
broadcast_custom_eventExecuteBroadcasts a custom event to all WebSocket clients. Args: event_data: Data to send with the event
-
obs-open-input-filtersExecuteOpens the filters dialog of an input
-
obs-open-input-interactExecuteOpens the interact dialog of an input
-
obs-open-input-propertiesExecuteOpens the properties dialog of an input
-
obs-open-source-projectorExecuteOpens a projector for a source
-
obs-open-video-mix-projectorExecuteOpens a projector for a specific output video mix
-
obs-resume-recordExecuteResumes the record output
-
obs-send-stream-captionExecuteSends CEA-608 caption text over the stream output
-
obs-set-current-scene-collectionExecuteSwitches to a scene collection
-
resume_recordExecuteResumes the record output.
-
send_stream_captionExecuteSends CEA-608 caption text over the stream output. Args: caption_text: Caption text to send
-
set_tbar_positionExecuteSets the position of the transition bar. Args: tbar_position: Position to set the T-bar to (0.0-1.0)
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.