High-risk tools in Wavexis

High severity Wavexis MCP Server 100 of 195 tools

100 of the 195 tools in Wavexis are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

wavexis_act Execute

wavexis_act
wavexis_activate_tab Execute

Activate (focus) a tab by its ID.
wavexis_animation_pause Execute

Pause an animation by ID.
wavexis_animation_play Execute

Play/resume an animation by ID.
wavexis_animation_set_rate Execute

Set the playback rate of an animation.
wavexis_back Execute

Navigate back in browser history.
wavexis_block_requests Execute

Block requests matching URL patterns.
wavexis_bluetooth_adapter_state Execute

Set Bluetooth adapter state (powered on/off).
wavexis_bluetooth_device_connect Execute

Emulate a Bluetooth device connection.
wavexis_bluetooth_device_disconnect Execute

Stop Bluetooth emulation.
wavexis_browser_context_create Execute

Create an isolated browser context within a session.
wavexis_cast_start Execute

Start tab mirroring to a cast sink.
wavexis_cast_stop Execute

Stop active cast mirroring.
wavexis_check Execute

Check a checkbox or radio button.
wavexis_click Execute

Click an element matching a CSS selector.
wavexis_crawl Execute

Crawl a website starting from a URL.
wavexis_debug_pause Execute

Pause script execution.
wavexis_debug_remove_breakpoint Execute

Remove a breakpoint by ID.
wavexis_debug_resume Execute

Resume script execution.
wavexis_debug_set_breakpoint Execute

Set a breakpoint by URL and line number.
wavexis_debug_set_breakpoint_function Execute

Set a breakpoint by function name.
wavexis_debug_step_into Execute

Step into in the debugger.
wavexis_debug_step_out Execute

Step out in the debugger.
wavexis_debug_step_over Execute

Step over in the debugger.
wavexis_dialog_accept Execute

Accept a JavaScript dialog (alert, confirm, prompt).
wavexis_dialog_dismiss Execute

Dismiss a JavaScript dialog.
wavexis_dom_focus Execute

Focus an element matching a CSS selector.
wavexis_dom_remove_attr Execute

Remove an attribute from an element matching a CSS selector.
wavexis_dom_scroll Execute

Scroll to an element or by offset.
wavexis_dom_set_attr Execute

Set an attribute on an element matching a CSS selector.
wavexis_drag Execute

Drag an element from source selector to target selector.
wavexis_emulate_device Execute

Emulate a specific device (iphone-15, pixel-8, etc.).
wavexis_eval Execute

Evaluate a JavaScript expression and return the result.
wavexis_extension_install Execute

Install a browser extension from a .crx or unpacked directory.
wavexis_forward Execute

Navigate forward in browser history.
wavexis_grant_permission Execute

Grant a browser permission (geolocation, notifications, etc.).
wavexis_hover Execute

Hover over an element matching a CSS selector.
wavexis_iframe_click Execute

Click an element inside an iframe.
wavexis_iframe_eval Execute

Evaluate a JavaScript expression inside an iframe.
wavexis_iframe_fill Execute

Fill an input element inside an iframe.
wavexis_ignore_cert_errors Execute

Enable or disable certificate error ignoring.
wavexis_intercept_download Execute

Intercept a download matching a URL pattern.
wavexis_intercept_requests Execute

Register a request interception pattern.
wavexis_key_press Execute

Press a keyboard key.
wavexis_lighthouse Execute

Run a Lighthouse-style audit on a URL.
wavexis_media_player_pause Execute

Pause a media player by ID.
wavexis_media_player_play Execute

Play a media player by ID.
wavexis_media_player_seek Execute

Seek a media player to a specific time.
wavexis_mock_response Execute

Register a mock response for a URL pattern.
wavexis_modify_request Execute

Intercept and modify requests matching a pattern in-flight (W6).
wavexis_modify_response Execute

Intercept and modify responses matching a pattern in-flight.
wavexis_mouse_click_xy Execute

Click at absolute pixel coordinates (press + release).
wavexis_mouse_double_click_xy Execute

Double-click at absolute pixel coordinates.
wavexis_mouse_down Execute

Press a mouse button at the given coordinates.
wavexis_mouse_move Execute

Move the mouse to an element matching a CSS selector.
wavexis_mouse_move_xy Execute

Move the mouse to absolute pixel coordinates.
wavexis_mouse_up Execute

Release a mouse button at the given coordinates.
wavexis_multi_action Execute

Execute multiple actions from a YAML config sequentially.
wavexis_navigate Execute

Navigate to a URL in the browser.
wavexis_new_tab Execute

Create a new browser tab.
wavexis_nl_click Execute

Click an element described in natural language.
wavexis_nl_fill Execute

Fill an element described in natural language.
wavexis_overlay_highlight Execute

Highlight an element with a colored overlay.
wavexis_pdf Execute

Generate a PDF of a web page.
wavexis_perf_profile Execute

Capture a CPU profile.
wavexis_raw_bidi Execute

Send a raw BiDi command (escape hatch).
wavexis_raw_cdp Execute

Send a raw CDP command (escape hatch).
wavexis_record Execute

Record browser interactions and generate a YAML workflow.
wavexis_reload Execute

Reload the current page.
wavexis_replay_har Execute

Replay network requests from a HAR file (W7).
wavexis_select_option Execute

Select an option in a ``<select>`` element by value.
wavexis_service_worker_emulate Execute

Emulate a service worker with a script URL.
wavexis_service_worker_update Execute

Trigger an update for a service worker registration.
wavexis_session_open Execute

Launch a persistent browser session for multi-step workflows.
wavexis_set_cache_disabled Execute

Enable or disable browser cache.
wavexis_set_cpu_throttle Execute

Enable CPU throttling at a given multiplier.
wavexis_set_dark_mode Execute

Enable or disable dark mode emulation.
wavexis_set_geolocation Execute

Override the browser geolocation.
wavexis_set_headers Execute

Set extra HTTP headers for all subsequent requests.
wavexis_set_locale Execute

Override the browser locale.
wavexis_set_sensors Execute

Override sensor values (orientation, motion, light, proximity).
wavexis_set_timezone Execute

Override the browser timezone.
wavexis_set_touch_emulation Execute

Enable or disable touch event emulation.
wavexis_set_viewport Execute

Set a custom viewport size and scale factor.
wavexis_set_window_bounds Execute

Set the browser window bounds.
wavexis_shadow_click Execute

Click an element inside a shadow DOM tree.
wavexis_shadow_eval Execute

wavexis_shadow_eval
wavexis_shadow_fill Execute

Fill an input element inside a shadow DOM tree.
wavexis_start_combined_trace Execute

Start a combined trace capturing screenshots, network, and console (W8).
wavexis_stop Execute

Stop all pending navigations and resource loads.
wavexis_tap Execute

Tap an element (touch emulation click).
wavexis_throttle_network Execute

Throttle network speed to emulate slow connections.
wavexis_type Execute

Type text into an element character by character.
wavexis_uncheck Execute

Uncheck a checkbox.
wavexis_video_action_overlay Execute

Enable or disable action overlay on the video recording.
wavexis_video_record Execute

Start recording a video of the page.
wavexis_video_stop Execute

Stop recording and return the video as base64 or save to file.
wavexis_wait Execute

Wait for a specific condition on the page.
wavexis_webaudio_stop_capture Execute

Stop WebAudio capture.
wavexis_webauthn_add_authenticator Execute

Add a virtual WebAuthn authenticator for testing.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Wavexis

Tools at high risk

Attacks that target this class

More on Wavexis

Enforce policy on every Wavexis tool call.