High-risk tools in MCP DevTools Server

High severity MCP DevTools Server MCP Server 42 of 79 tools

42 of the 79 tools in MCP DevTools Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

python_venv Execute

Manage Python virtual environments (create, delete, info, list packages)
commitlint Execute

Run commitlint to validate commit messages
eslint Execute

Run ESLint on JavaScript/TypeScript files
go_benchmark Execute

Run Go benchmarks to measure code performance
go_build Execute

Build Go packages with cross-compilation and custom build flags support
lint_all Execute

Run all available linters based on project type
lint_files Execute

Run custom linting rules on project files
make_build Execute

Run make build command to build the project
make_clean Execute

Run make clean command to clean build artifacts
make_depend Execute

Run make depend command to install or update dependencies
make_lint Execute

Run make lint command to check code style and quality
markdownlint Execute

Run markdownlint on markdown files
nodejs_benchmark Execute

Run performance benchmarks with Vitest, benchmark.js, or custom scripts
nodejs_build Execute

Run build script with package manager (npm/yarn/pnpm/bun)
nodejs_lint Execute

Run ESLint on Node.js/TypeScript code
nodejs_scripts Execute

Run or list npm scripts from package.json with caching
nodejs_security Execute

Run security audit with npm/yarn audit to detect vulnerabilities
onboarding_wizard Execute

Run intelligent zero-configuration onboarding wizard to detect project type, generate configuration, verify tools, and validate setup
python_benchmark Execute

Run performance benchmarks using pytest-benchmark with statistical analysis
python_build Execute

Build Python packages (wheels and sdists) using modern python -m build
run_tests Execute

Run tests using the detected test framework
staticcheck Execute

Run staticcheck for enhanced Go static analysis
yamllint Execute

Run yamllint on YAML files
analyze_command Execute

Execute a command and analyze the result with AI-powered smart suggestions. Provides intelligent recommendations for fixing failures, optimizing workflows, and identifying issues.
go_fmt Execute

Format Go code using gofmt
go_mod_download Execute

Download Go module dependencies
go_mod_tidy Execute

Tidy Go module dependencies
go_test Execute

Run Go tests with coverage and race detection
jq_query Execute

Process JSON data using jq filter syntax without requiring approval.
make_test Execute

Run make test command to execute project tests
nodejs_check_types Execute

Run TypeScript type checking
nodejs_profile Execute

Profile Node.js application performance using built-in Node.js profiler
nodejs_test Execute

Run Node.js tests with Jest, Vitest, or Mocha
python_format Execute

Format Python code using ruff format with check mode support
python_lint Execute

Lint Python code using ruff check with auto-fix support
python_profile Execute

Profile Python code performance using cProfile, py-spy, or memray
python_test Execute

Run Python tests using pytest with coverage reporting and test selection
stack_restack Execute

Rebase stack on latest changes
branch_checkout Execute

Checkout an existing branch
go_generate Execute

Run go generate to execute code generation directives
nodejs_install_deps Execute

Install Node.js dependencies with npm, yarn, pnpm, or bun
python_install_deps Execute

Install Python dependencies using uv, poetry, pipenv, or pip with package manager auto-detection

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in MCP DevTools Server

Tools at high risk

Attacks that target this class

More on MCP DevTools Server

Enforce policy on every MCP DevTools Server tool call.