High Risk →

structural_types

Get auto-discovered structural type classifications from a discovery session. After running discover_patterns, returns the structural categories the platform identified in the data — without being told what categories exist. Each category includes document count, distinguishing fields, and domain...

Risk signalsHandles credentials or secrets (api_key)

Part of the Governance Platform server.

structural_types can trigger actions in Governance Platform, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE GOVERNANCE PLATFORM →

Free to start. No card required.

AI agents invoke structural_types to trigger processes or run actions in Governance Platform. Execute operations can have side effects beyond the immediate call -- triggering builds, sending notifications, or starting workflows. Rate limits and argument validation are essential to prevent runaway execution.

structural_types can trigger processes with real-world consequences. An uncontrolled agent might start dozens of builds, send mass notifications, or kick off expensive compute jobs. PolicyLayer enforces rate limits and validates arguments to keep execution within safe bounds.

Execute tools trigger processes. Rate-limit and validate arguments to prevent unintended side effects.

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "structural_types": {
      "limits": [
        {
          "counter": "structural_types_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

See the full Governance Platform policy for all 31 tools.

Get this rule live on your own Governance Platform server in minutes. PolicyLayer enforces it on every call, before it runs.

ENFORCE ON MY GOVERNANCE PLATFORM →

View all 31 tools →

These attack patterns abuse exactly the kind of access structural_types gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

Every attack above starts with a tool call. PolicyLayer checks each one against your policy first, so structural_types only ever does what you allow.

SECURE GOVERNANCE PLATFORM →

Other execute tools across the catalogue. The same approach applies to each: rate-limit and validate the arguments.

What does the structural_types tool do? +

Get auto-discovered structural type classifications from a discovery session. After running discover_patterns, returns the structural categories the platform identified in the data — without being told what categories exist. Each category includes document count, distinguishing fields, and domain hints inferred from the data shape. This is a read-only retrieval. If discover_patterns has not been run against the given blueprint namespace (or the session has expired), returns an empty type list with status="no_session". Use after discover_patterns when you want to understand how the platform grouped your data before deciding which patterns to promote via approve_rule. Args: api_key: GeodesicAI API key (starts with gai_) blueprint: Discovery session namespace (must match the namespace used in discover_patterns) Returns: status: "ok" or "no_session" structural_types: list of {type_id, document_count, distinguishing_fields, domain_hint} total_documents: total document count across all types. It is categorised as a Execute tool in the Governance Platform MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on structural_types? +

Register the Governance Platform MCP server in PolicyLayer and add a rule for structural_types: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Governance Platform. Nothing to install.

What risk level is structural_types? +

structural_types is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit structural_types? +

Yes. Add a rate_limit block to the structural_types rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block structural_types completely? +

Set action: deny in the PolicyLayer policy for structural_types. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides structural_types? +

structural_types is provided by the Governance Platform MCP server (https://app.geodesiclabs.ai/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Governance Platform tool call.

Deterministic rules across all 31 Governance Platform tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.