High-risk tools in Ludus FastMCP
33 of the 231 tools in Ludus FastMCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
abort_template_buildExecuteAbort the running packer build(s).
-
apply_adversary_profileExecuteapply_adversary_profile
-
apply_blueprint_to_rangeExecuteApply a blueprint to a range.
-
apply_defender_profileExecuteapply_defender_profile
-
batch_power_on_hostsExecutebatch_power_on_hosts
-
batch_snapshot_hostsExecutebatch_snapshot_hosts
-
build_container_based_templateExecutebuild_container_based_template
-
build_range_from_descriptionExecutebuild_range_from_description
-
build_range_from_scratchExecutebuild_range_from_scratch
-
build_range_from_skeletonExecutebuild_range_from_skeleton
-
build_templateExecutebuild_template
-
bulk_vm_operationsExecutebulk_vm_operations
-
deploy_rangeExecutedeploy_range
-
deploy_range_from_blueprintExecutedeploy_range_from_blueprint
-
deploy_scenarioExecutedeploy_scenario
-
git_syncExecutegit_sync
-
health_checksExecuteRun health checks on all VMs in the range.
-
install_blueprintExecuteinstall_blueprint
-
install_from_sourceExecuteinstall_from_source
-
install_galaxy_roleExecuteinstall_galaxy_role
-
install_roleExecuteinstall_role
-
install_role_from_urlExecuteinstall_role_from_url
-
migrate_sqlite_to_pocketbaseExecuteMigrate from SQLite to PocketBase.
-
migrate_to_sdnExecuteMigrate to SDN networking.
-
optimize_resource_allocationExecuteOptimize resource allocation for the range.
-
power_on_rangeExecutePower on all VMs in the range.
-
schedule_range_tasksExecuteschedule_range_tasks
-
security_auditExecuteRun security audit on the range.
-
setup_sdnExecuteSetup SDN infrastructure.
-
smart_deployExecutesmart_deploy
-
start_testingExecuteStart testing state for the range.
-
stop_testingExecuteStop testing state for the range.
-
test_network_connectivityExecutetest_network_connectivity
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.