set_postgresql_privileges

What set_postgresql_privileges does on cPanel MCP Server

AI agents use set_postgresql_privileges to create or update resources in cPanel MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your cPanel MCP Server environment.

Why set_postgresql_privileges is rated Medium

Granting database privileges is a Write operation because it creates or modifies access control configuration. The severity is high because misconfigured database privileges can expose sensitive data to unauthorized users or allow privilege escalation. An AI agent could inadvertently grant excessive permissions to the wrong user or database, leading to data breaches.

From the tool's definition "Grant a PostgreSQL user access to a database" — this modifies user-database permissions, creating a persistent relationship that allows database access. This is a reversible data/access modification (grants can be revoked), distinct from destructive deletion.

The rule that runs set_postgresql_privileges safely

PolicyLayer is an MCP gateway: it sits between your AI agents and cPanel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For set_postgresql_privileges, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "set_postgresql_privileges": {
      "limits": [
        {
          "counter": "set_postgresql_privileges_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about set_postgresql_privileges