Retrieves the DynamoDB Data Model Schema Converter Expert prompt. This tool returns a specialized prompt for converting DynamoDB data models (dynamodb_data_model.md) into schema.json - a structured JSON representation used for generating type-safe entities and repositories. By default, also incl...
Part of the AWS DynamoDB MCP Server MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.
AI agents call dynamodb_data_model_schema_converter to retrieve information from AWS DynamoDB MCP Server without modifying any data. This is common in research, monitoring, and reporting workflows where the agent needs context before taking action. Because read operations don't change state, they are generally safe to allow without restrictions -- but you may still want rate limits to control API costs.
Even though dynamodb_data_model_schema_converter only reads data, uncontrolled read access can leak sensitive information or rack up API costs. An agent caught in a retry loop could make thousands of calls per minute. A rate limit gives you a safety net without blocking legitimate use.
Read-only tools are safe to allow by default. No rate limit needed unless you want to control costs.
tools:
dynamodb_data_model_schema_converter:
rules:
- action: allowSee the full AWS DynamoDB MCP Server policy for all 8 tools.
Agents calling read-class tools like dynamodb_data_model_schema_converter have been implicated in these attack patterns. Read the full case and prevention policy for each:
Other tools in the Read risk category across the catalogue. The same policy patterns (rate-limit, allow) apply to each.
Retrieves the DynamoDB Data Model Schema Converter Expert prompt. This tool returns a specialized prompt for converting DynamoDB data models (dynamodb_data_model.md) into schema.json - a structured JSON representation used for generating type-safe entities and repositories. By default, also includes instructions for generating usage_data.json with realistic sample data. The prompt guides through: - Reading and parsing dynamodb_data_model.md files - Converting table designs, GSIs, and access patterns into structured JSON format - Validating generated schemas using the dynamodb_data_model_schema_validator tool - Iteratively fixing validation errors (up to 8 iterations) - Generating usage_data.json with realistic sample data from markdown tables (unless generate_usage_data=False) - Creating isolated output folders with schema.json (and optionally usage_data.json) When to set generate_usage_data=False: - User explicitly asks for "schema only", "just schema", "without usage data", "without examples" - User wants to skip sample data generation - User only needs the schema structure for validation or review Args: generate_usage_data: If True (default), includes instructions for generating usage_data.json. If False, only generates schema.json. Returns: Complete schema converter expert prompt as text. It is categorised as a Read tool in the AWS DynamoDB MCP Server MCP Server, which means it retrieves data without modifying state.
Add a rule in your Intercept YAML policy under the tools section for dynamodb_data_model_schema_converter. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the AWS DynamoDB MCP Server MCP server.
dynamodb_data_model_schema_converter is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the dynamodb_data_model_schema_converter rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the Intercept policy for dynamodb_data_model_schema_converter. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
dynamodb_data_model_schema_converter is provided by the AWS DynamoDB MCP Server MCP server (awslabs.dynamodb-mcp-server). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.