High-risk tools in XcodeBazelMCP

High severity XcodeBazelMCP MCP Server 69 of 117 tools

69 of the 117 tools in XcodeBazelMCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

bazel_ios_agent_debug_repro Execute

One-shot Cursor debug repro: clear host log → build_and_run with AGENT_DEBUG_* launchEnv → optional log capture.
bazel_ios_lldb_breakpoint Execute

Set a breakpoint by file+line, symbol name, or delete/list breakpoints.
bazel_ios_privacy Execute

Grant, revoke, or reset privacy permissions for an app on a simulator.
bazel_daemon_start Execute

Start or ensure the per-workspace background daemon is running. The daemon keeps stateful operations (log captures, video recordings, LLDB sessions) alive across MCP reconnections.
bazel_daemon_stop Execute

Stop the per-workspace background daemon and clean up all active stateful operations.
bazel_ios_build Execute

Build a Bazel target with iOS-oriented defaults for simulator/device builds.
bazel_ios_build_and_run Execute

Build a Bazel iOS app, install it on a simulator or physical device, and launch it. One-shot build-run cycle. Default platform is simulator; pass platform=device for physical de...
bazel_ios_device_build_and_run Execute

Build a Bazel iOS app for device (arm64), install it on a connected device, and launch it.
bazel_ios_device_launch_app Execute

Launch an installed app on a connected physical iOS device by bundle identifier.
bazel_ios_device_log_start Execute

Start capturing logs from a connected physical iOS device. Tries pymobiledevice3 first (iOS 17+ via CoreDevice tunnel), falls back to idevicesyslog for older devices.
bazel_ios_device_log_stop Execute

Stop an active device log capture and return captured output.
bazel_ios_device_stop_app Execute

Terminate a running app on a connected physical iOS device by bundle identifier.
bazel_ios_discover_targets Execute

Discover Bazel iOS app, unit/UI test, and build-test targets using bazel query.
bazel_ios_launch_app Execute

Launch an installed app on an iOS simulator by bundle identifier.
bazel_ios_lldb_command Execute

Run an arbitrary LLDB command. Use for advanced debugging not covered by other tools.
bazel_ios_log_capture_start Execute

Start capturing device logs from a booted simulator. Returns a capture ID.
bazel_ios_log_capture_stop Execute

Stop a running log capture and return captured logs.
bazel_ios_stop_app Execute

Terminate a running app on a booted simulator by bundle identifier.
bazel_ios_video_record_start Execute

Start recording video from a booted simulator. Returns a recording ID to stop later.
bazel_ios_video_record_stop Execute

Stop an active video recording and finalize the file.
bazel_macos_build Execute

Build a Bazel macOS target (macos_application, macos_bundle, macos_command_line_application, etc.).
bazel_macos_clean Execute

Clean Bazel macOS build outputs. Equivalent to bazel_ios_clean but scoped for macOS context.
bazel_macos_coverage Execute

Run Bazel macOS test with coverage collection and lcov output.
bazel_macos_launch Execute

Launch a previously built macOS application by its bundle path or target label.
bazel_macos_run Execute

Build and launch a Bazel macOS application locally via
bazel_macos_stop Execute

Terminate a running macOS application by bundle ID or process name.
bazel_tvos_build Execute

Build a Bazel tvOS target (tvos_application, tvos_extension, etc.).
bazel_tvos_run Execute

Build and launch a Bazel tvOS application via
bazel_visionos_build Execute

Build a Bazel visionOS target (visionos_application, etc.).
bazel_visionos_run Execute

Build and launch a Bazel visionOS application via
bazel_watchos_build Execute

Build a Bazel watchOS target (watchos_application, watchos_extension, etc.).
bazel_watchos_run Execute

Build and launch a Bazel watchOS application via
swift_package_build Execute

Build a Swift package using
swift_package_run Execute

Build and run an executable target in a Swift package using
bazel_ios_device_pair Execute

Pair with a physical iOS device for development.
bazel_ios_device_test Execute

Run Bazel iOS tests on a connected physical device. Builds with arm64 and runs via
bazel_ios_lldb_detach Execute

Detach LLDB from a process and end the debug session.
bazel_ios_lldb_expression Execute

Evaluate an expression in the current frame context (e.g. print a variable, call a method).
bazel_ios_lldb_step Execute

Step through code: over (next line), into (enter function), or out (finish function).
bazel_ios_lldb_threads Execute

List all threads or select a specific thread/frame for inspection.
bazel_ios_lldb_variables Execute

Inspect local variables, arguments, or all frame variables at the current stop point.
bazel_ios_pinch Execute

Simulate a pinch (zoom) gesture on the simulator.
bazel_ios_shutdown_simulator Execute

Shutdown a running iOS simulator.
bazel_ios_test Execute

Run a Bazel iOS test target with simulator and test-output defaults.
bazel_ios_test_coverage Execute

Run a Bazel iOS test target and collect code coverage data (lcov format).
bazel_macos_test Execute

Run a Bazel macOS unit test target (macos_unit_test).
bazel_tvos_test Execute

Run a Bazel tvOS unit test target (tvos_unit_test).
bazel_visionos_test Execute

Run a Bazel visionOS unit test target (visionos_unit_test).
bazel_watchos_test Execute

Run a Bazel watchOS unit test target (watchos_unit_test).
swift_package_test Execute

Run tests in a Swift package using
bazel_ios_boot_simulator Execute

Boot an iOS simulator device.
bazel_ios_device_install_app Execute

Install a previously built .app bundle onto a connected physical iOS device.
bazel_ios_double_tap Execute

Simulate a double-tap at screen coordinates on the simulator.
bazel_ios_drag Execute

Simulate a drag gesture from one point to another on the simulator.
bazel_ios_install_app Execute

Install a previously built .app bundle onto an iOS simulator.
bazel_ios_key_press Execute

Send a key press event to the simulator (e.g. Return, Escape, Home).
bazel_ios_lldb_attach Execute

Attach LLDB debugger to a running process by PID or process name. Returns a session ID for subsequent debug commands.
bazel_ios_long_press Execute

Simulate a long press at screen coordinates on the simulator.
bazel_ios_open_simulator Execute

Open Simulator.app and optionally bring a specific device to the foreground.
bazel_ios_open_url Execute

Open a URL on a booted simulator (deep links, universal links, web URLs).
bazel_ios_push_notification Execute

Send a simulated push notification to an app on a booted simulator.
bazel_ios_set_simulator_appearance Execute

Set the simulator UI appearance to light or dark mode.
bazel_ios_set_simulator_location Execute

Set the simulated GPS location on a booted simulator.
bazel_ios_set_status_bar Execute

Override the simulator status bar (time, battery, network, etc.). Useful for consistent screenshots.
bazel_ios_swipe Execute

Simulate a swipe gesture on the simulator.
bazel_ios_tap Execute

Simulate a tap at screen coordinates on the simulator.
bazel_ios_type_text Execute

Type text into the focused field on the simulator.
bazel_upgrade Execute

Upgrade XcodeBazelMCP to the latest version. Auto-detects install method (npm, Homebrew, source).
swift_package_resolve Execute

Resolve and fetch Swift package dependencies (

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in XcodeBazelMCP

Tools at high risk

Attacks that target this class

More on XcodeBazelMCP

Enforce policy on every XcodeBazelMCP tool call.