High-risk tools in Xcode

High severity Xcode MCP Server 25 of 69 tools

25 of the 69 tools in Xcode are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

boot_simulator Execute

Boot an iOS simulator by UDID or name
build_spm_package Execute

Builds a Swift Package Manager package directly using
build_swift_package Execute

Builds a Swift Package using Swift Package Manager.
change_directory Execute

Changes the active directory for relative path operations.
clean_swift_package Execute

Cleans the build artifacts of a Swift Package.
compile_asset_catalog Execute

Compiles an asset catalog (.xcassets) using actool
export_archive Execute

Export an Xcode archive for distribution (App Store, Ad Hoc, Enterprise, Development)
install_app Execute

Install an app on a simulator
launch_app Execute

Launch an installed app on a simulator
open_url Execute

Open a URL in a simulator
pod_install Execute

Runs
pod_repo_update Execute

Updates the local clone of the CocoaPods spec repositories.
pod_update Execute

Runs
pop_directory Execute

Pops a directory from the stack and changes to it.
push_directory Execute

Pushes the current directory onto a stack and changes to a new directory.
run_lldb Execute

Launches the LLDB debugger with optional arguments
run_xcrun Execute

Executes a specified Xcode tool via xcrun
shutdown_simulator Execute

Shutdown a simulator by UDID, or shutdown all running simulators
swift_package_command Execute

Executes Swift Package Manager commands in the active project directory.
switch_xcode Execute

Switch the active Xcode version
terminate_app Execute

Terminate a running app on a simulator
test_spm_package Execute

Runs tests for a Swift Package Manager package directly using
test_swift_package Execute

Tests a Swift Package using Swift Package Manager.
trace_app Execute

Captures a performance trace of an application using xctrace
validate_app Execute

Validate an app for App Store submission using altool

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Xcode

Tools at high risk

Attacks that target this class

More on Xcode

Enforce policy on every Xcode tool call.