create_addon_domain

What create_addon_domain does on cPanel MCP Server

AI agents use create_addon_domain to create or update resources in cPanel MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your cPanel MCP Server environment.

Why create_addon_domain is rated Medium

Creating an addon domain is a write operation that modifies the cPanel account configuration by adding a new domain entry. While not destructive in the sense of deletion, it materially alters the account state. Severity is high because an unauthorized AI agent could register numerous domains, consuming resources, creating phishing/spam infrastructure, or impacting billing if domain limits are enforced.

From the tool's definition Tool creates a new addon domain in cPanel, which is an irreversible operation that adds new DNS and hosting infrastructure under the account. The description states 'Create a new addon domain', clearly indicating a creation (write) action.

The rule that runs create_addon_domain safely

PolicyLayer is an MCP gateway: it sits between your AI agents and cPanel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_addon_domain, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_addon_domain": {
      "limits": [
        {
          "counter": "create_addon_domain_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_addon_domain