gcp_ar_create_repository

What gcp_ar_create_repository does on GCP MCP Server

AI agents use gcp_ar_create_repository to create or update resources in GCP MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your GCP MCP Server environment.

Why gcp_ar_create_repository is rated Medium

This tool modifies cloud infrastructure by creating a new repository resource, which is a reversible operation (can be deleted). However, the blast radius is high because an adversary could create repositories to store malicious artifacts, poison supply chains, or consume quota/billing resources. This is Write rather than Execute because it directly creates a resource rather than running arbitrary code or commands.

From the tool's definition Tool creates a new Artifact Registry repository. 'Create' is explicitly a write operation that adds a new resource to GCP. Artifact Registry repositories store build artifacts, container images, and packages—creating one establishes persistent infrastructure.

The rule that runs gcp_ar_create_repository safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GCP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gcp_ar_create_repository, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gcp_ar_create_repository": {
      "limits": [
        {
          "counter": "gcp_ar_create_repository_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about gcp_ar_create_repository