remove_intent_card | PolicyLayer

WHAT IT DOES

What remove_intent_card does on Agent Passport System — Cryptographic Identity for AI Agents

AI agents call remove_intent_card to permanently remove resources in Agent Passport System — Cryptographic Identity for AI Agents — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

Parameter	Type	Required	Description
`card_id`	string	Yes	Card ID to remove

Parameters from the server's own tool schema.

THE RISK

Critical Risk

Why remove_intent_card needs a policy

Removing an IntentCard from the Intent Network is an irreversible deletion of the agent's published intent registration. The action cannot be undone without re-creating and re-publishing the card, making it Destructive. Severity is medium since it affects only this agent's identity/intent advertisement rather than financial or system-wide data.

From the tool's definition 'Remove your IntentCard from the Intent Network' — explicitly removes/deletes a registered entity from a network

Documented attack patterns abuse exactly the kind of access remove_intent_card gives an agent:

POLICY

How to control remove_intent_card

PolicyLayer is an MCP gateway — it sits between your AI agents and Agent Passport System — Cryptographic Identity for AI Agents, and nothing reaches the server without passing your rules. This is the rule we recommend for remove_intent_card:

policy.json

{
  "version": "1",
  "default": "deny",
  "hide": [
    "remove_intent_card"
  ]
}

remove_intent_card disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

Create a free account and register Agent Passport System — Cryptographic Identity for AI Agents — nothing to install.
Add this policy — paste it, or build it visually.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

RESTRICT THIS TOOL →

Free to start. No card required.

EXPLORE

Related tools and policies

More Agent Passport System — Cryptographic Identity for AI Agents tools

Financial aps_aggregate_settlement Aggregate a batch of Attribution Primitives over a half-open settlement period [t0, t1) in Financial request_human_approval Request human approval for a high-value purchase. Destructive revoke_delegation [OPERATOR] Revoke a delegation. Optionally cascade to all sub-delegations. Destructive revoke_endorsement Revoke a principal's endorsement of an agent. 'I no longer authorize this agent.' Destructive aps_withdraw_provisional Commitment boundary: author withdraws their own provisional statement. Already-promoted st Execute aps_construct_attribution_primitive Build and sign a four-axis AttributionPrimitive for an action. Axes: D (data sources), P ( Execute commerce_preflight Run preflight checks before a purchase. Validates passport, delegation, merchant, and spen Execute execute_with_context [deprecated in v3.0.0 — use gateway.aeoess.com REST API] Execute an action through the enf

All 150 Agent Passport System — Cryptographic Identity for AI Agents tools →

Destructive tools on other servers

Android Forensics ADB MCP Server create_full_backup 0xarchive web3_revoke_key Frida Game Hacking MCP clear_scan cPanel MCP Server clear_spam_box

Go deeper

Critical-risk tools in Agent Passport System — Cryptographic Identity for AI Agents → Every critical-risk tool this server exposes, in one view.
All critical-risk MCP tools → Every critical-risk tool across the catalogue, and the policy pattern that contains them.
The MCP Attack Database → Documented attack patterns against MCP deployments — and the policies that stop them.
Blast radius → How much damage one compromised or confused agent can do — and how to bound it.
Tool call approval → Approval gates on individual tool calls: auto-allow, prompt, or deny.
Rate Limiting MCP Tool Calls: A Practical Guide →
MCP Security: Why Prompt Guardrails Aren't Enough →

FAQ

Questions about remove_intent_card

What does the remove_intent_card tool do? +

Remove your IntentCard from the Intent Network. Use when your needs or offers have changed. It is categorised as a Destructive tool in the Agent Passport System — Cryptographic Identity for AI Agents MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

What parameters does remove_intent_card accept? +

remove_intent_card accepts 1 parameter: card_id. Required: card_id. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on remove_intent_card? +

Register the Agent Passport System — Cryptographic Identity for AI Agents MCP server in PolicyLayer and add a rule for remove_intent_card: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Agent Passport System — Cryptographic Identity for AI Agents. Nothing to install.

What risk level is remove_intent_card? +

remove_intent_card is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit remove_intent_card? +

Yes. Add a rate_limit block to the remove_intent_card rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block remove_intent_card completely? +

Set action: deny in the PolicyLayer policy for remove_intent_card. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides remove_intent_card? +

remove_intent_card is provided by the Agent Passport System — Cryptographic Identity for AI Agents MCP server (https://mcp.aeoess.com/sse). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Agent Passport System — Cryptographic Identity for AI Agents tool call.

Start from Agent Passport System — Cryptographic Identity for AI Agents, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

150 Agent Passport System — Cryptographic Identity for AI Agents tools catalogued and risk-classified — across an index of 43,000+ MCP servers.