close_appstack_change_request

What close_appstack_change_request does on Alibabacloud Devops

AI agents use close_appstack_change_request to create or update resources in Alibabacloud Devops, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Alibabacloud Devops environment.

Why close_appstack_change_request is rated Medium

Closing a change request is a reversible write operation—it changes the status/state of an existing resource but does not delete it or execute arbitrary code. The effect is limited to state management within the deployment/change control system. Severity is medium because improper closure of critical change requests could disrupt development workflows, but the action can be undone by reopening the request.

From the tool's definition Tool name 'close_appstack_change_request' indicates modification of a change request resource by changing its state to closed. Description states 'Close a change request', which is a state transition that modifies but does not delete the underlying resource.

The rule that runs close_appstack_change_request safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Alibabacloud Devops, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For close_appstack_change_request, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "close_appstack_change_request": {
      "limits": [
        {
          "counter": "close_appstack_change_request_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about close_appstack_change_request