add_ssh_key

What add_ssh_key does on SSH MCP Server

AI agents use add_ssh_key to create or update resources in SSH MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your SSH MCP Server environment.

Why add_ssh_key is rated Medium

Adding SSH keys modifies the authentication system and grants access, but the operation is reversible (keys can be removed). It falls under Write rather than Execute because it's not running commands or scripts. However, severity is high because misconfigured SSH key additions could grant unauthorized access to remote systems. The 'policy checks' mention suggests some safeguards exist, preventing critical rating.

From the tool's definition Tool name 'add_ssh_key' and description 'Register a new SSH public key with policy checks' indicate creation/modification of SSH authentication credentials. This is a write operation that creates new security material.

The rule that runs add_ssh_key safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SSH MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For add_ssh_key, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_ssh_key": {
      "limits": [
        {
          "counter": "add_ssh_key_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about add_ssh_key