set_group_admin

What set_group_admin does on NapCat MCP Server

AI agents use set_group_admin to create or update resources in NapCat MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NapCat MCP Server environment.

Why set_group_admin is rated Medium

This tool creates or modifies group membership metadata (admin status) but does not irreversibly delete data or execute arbitrary code. It is reversible—admin status can be changed back. However, it carries high severity because granting admin privileges to unauthorized parties could enable malicious group control, message deletion, member removal, and other harmful actions through subsequent tool calls.

From the tool's definition Tool name 'set_group_admin' indicates modification of group administrative privileges. The server description notes 'group management' capabilities, and this tool directly modifies group member roles/permissions, which is a reversible structural change to…

Risk signalsAdmin/system-level operation

The rule that runs set_group_admin safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NapCat MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For set_group_admin, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "set_group_admin": {
      "limits": [
        {
          "counter": "set_group_admin_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about set_group_admin