update_app_tag

What update_app_tag does on Alibabacloud Devops

AI agents use update_app_tag to create or update resources in Alibabacloud Devops, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Alibabacloud Devops environment.

Why update_app_tag is rated Medium

This tool creates or modifies data reversibly by updating an application tag. Tags can typically be removed or changed without permanent data loss, making it a Write operation rather than Destructive. The severity is medium because misuse could mislabel applications affecting deployment decisions, but the impact is generally reversible and scoped to metadata rather than core application or infrastructure changes.

From the tool's definition Tool name 'update_app_tag' and description 'Update an application tag' indicate modification of metadata/tagging on an application resource. The verb 'update' is explicitly used, confirming this is a write operation that modifies existing data.

The rule that runs update_app_tag safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Alibabacloud Devops, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_app_tag, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_app_tag": {
      "limits": [
        {
          "counter": "update_app_tag_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_app_tag