High-risk tools in Claude Fidelity

High severity Claude Fidelity MCP Server 3 of 13 tools

3 of the 13 tools in Claude Fidelity are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

fidelity_login Execute

Log in to Fidelity. Supports TOTP 2FA (automatic) and SMS 2FA (requires follow-up with fidelity_submit_2fa). Credentials can be passed directly or via env vars FIDELITY_USERNAME...
fidelity_logout Execute

Close the Fidelity browser session and save cookies for faster re-login next time.
fidelity_submit_2fa Execute

Submit the SMS 2FA code received on your phone to complete Fidelity login. Only use this after fidelity_login returns needsSms2FA=true.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Claude Fidelity

Tools at high risk

Attacks that target this class

More on Claude Fidelity

Enforce policy on every Claude Fidelity tool call.