send_group_forward_msg · NapCat MCP Server MCP

WHAT IT DOES

What send_group_forward_msg does on NapCat MCP Server

AI agents use send_group_forward_msg to create or update resources in NapCat MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NapCat MCP Server environment.

WHY IT NEEDS A POLICY

Why send_group_forward_msg needs a policy

This tool creates/writes a new message object (a forward message) in a group chat. While it affects group state and visibility, the action is reversible through delete_msg operations available on the same server. The severity is medium because misuse could spam a group or spread misinformation, but the blast radius is limited to message transmission without data loss or financial impact.

From the tool's definition Tool name 'send_group_forward_msg' and description 'Send group forward message' indicate creation/transmission of a message to a group.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

send_group_forward_msg Rate-limited

send_group_forward_msg stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "send_group_forward_msg": {
      "limits": [
        {
          "counter": "send_group_forward_msg_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches NapCat MCP Server, so you can run agents against it safely.

FAQ

Questions about send_group_forward_msg

What does the send_group_forward_msg tool do? +

Send group forward message. It is categorised as a Write tool in the NapCat MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on send_group_forward_msg? +

Register the NapCat MCP Server MCP server in PolicyLayer and add a rule for send_group_forward_msg: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches NapCat MCP Server. Nothing to install.

What risk level is send_group_forward_msg? +

send_group_forward_msg is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit send_group_forward_msg? +

Yes. Add a rate_limit block to the send_group_forward_msg rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block send_group_forward_msg completely? +

Set action: deny in the PolicyLayer policy for send_group_forward_msg. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides send_group_forward_msg? +

send_group_forward_msg is provided by the NapCat MCP Server MCP server (1021143806/napcat_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.