add_user_to_group

What add_user_to_group does on AIquila — Nextcloud MCP Server

AI agents use add_user_to_group to create or update resources in AIquila — Nextcloud MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your AIquila — Nextcloud MCP Server environment.

Why add_user_to_group is rated Medium

This tool creates or modifies group membership, which is a reversible data change (users can be removed from groups). It does not delete data (Destructive), execute arbitrary code (Execute), or move money (Financial). While it modifies access control structures and requires admin privileges, the operation itself is reversible, placing it in Write rather than Execute.

From the tool's definition Tool adds a user to a group, which modifies group membership data. Description explicitly states 'Add a Nextcloud user to a group', indicating a creation/modification operation. Requires admin privileges, indicating elevated access control.

Risk signalsAdmin/system-level operation

The rule that runs add_user_to_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AIquila — Nextcloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For add_user_to_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_user_to_group": {
      "limits": [
        {
          "counter": "add_user_to_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about add_user_to_group