High-risk tools in Tolpo

High severity Tolpo MCP Server 15 of 243 tools

15 of the 243 tools in Tolpo are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

automation_dry_run Execute

Read current observations and say what would fire now without actions or state changes.
automation_tick Execute

Evaluate once, run due actions through policy, and report individual failures.
camera_ptz_patrol Execute

Start or stop an existing camera patrol. Patrol uses battery power.
camera_ptz_stop Execute

Stop pan and tilt movement now. Sent without any capability read first, so it works even when other reads fail.
camera_recordings_day Execute

List the recorded pieces of one day on a camera's memory card: start, end, length and whether each was
camera_system_reboot Execute

Restart a supported camera. State refresh may report the expected temporary outage.
network_new_destinations Execute

network_new_destinations
vacuum_clean_rooms Execute

Start cleaning selected rooms on an explicit map with global settings.
vacuum_empty_bin Execute

Start dust collection machinery at a compatible dock.
vacuum_preset Execute

Start an existing custom preset on its map.
vacuum_spot Execute

Start spot cleaning around the robot's current position.
vacuum_start Execute

Start a new whole-home cleaning job. Use vacuum_pause with paused=false to resume.
vacuum_stop Execute

End the current job. UNVERIFIED on a device: sends setSwitchClean with clean_on=false, as the app's stop does.
vacuum_task_group Execute

Start a saved task group, the app's task-group cleaning mode 7.
valve_maintenance_start Execute

Start a KE100 mechanical cycle. Poll valve_settings for calibration or descaling status.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Tolpo

Tools at high risk

Attacks that target this class

More on Tolpo

Enforce policy on every Tolpo tool call.