High-risk tools in It2mcp

High severity It2mcp MCP Server 18 of 40 tools

18 of the 40 tools in It2mcp are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

app_activate Execute

Activate iTerm2 (bring to front).
batch Execute

batch
broadcast_on Execute

Enable input broadcasting to all sessions in the current tab.
session_clear Execute

Clear the screen of an iTerm2 session (sends Ctrl+L).
session_focus Execute

Focus (activate) a specific iTerm2 session.
session_restart Execute

Restart an iTerm2 session.
session_run Execute

Execute a command in an iTerm2 session (sends text + Enter).
session_send Execute

Send text to an iTerm2 session without pressing Enter.
session_split Execute

Split an iTerm2 session into a new pane.
tab_move Execute

Move a tab to its own new window.
tab_new Execute

Create a new tab in an iTerm2 window.
tab_next Execute

Switch to the next tab in the current window.
tab_prev Execute

Switch to the previous tab in the current window.
tab_select Execute

Select a tab by its ID or numeric index.
window_arrange_restore Execute

Restore a saved window arrangement.
window_focus Execute

Focus (activate) a specific iTerm2 window.
window_new Execute

Create a new iTerm2 window.
window_resize Execute

Resize an iTerm2 window.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in It2mcp

Tools at high risk

Attacks that target this class

More on It2mcp

Enforce policy on every It2mcp tool call.