jwt_validate

What jwt_validate does on WordPress MCP Server

AI agents call jwt_validate to retrieve information from WordPress MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why jwt_validate is rated Low

JWT validation is a read-only operation that checks the authenticity and integrity of a token without modifying, creating, or deleting any data. It performs cryptographic verification and returns validation results. This is a low-severity operation as token validation is a standard security practice and misuse would primarily affect authentication logic rather than causing data compromise or financial impact.

From the tool's definition Tool name 'jwt_validate' and description 'Validiert einen JWT Token' (Validates a JWT token) indicate a verification/validation operation with no side effects on data or state.

The rule that runs jwt_validate safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WordPress MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For jwt_validate, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "jwt_validate": {}
  }
}

Questions about jwt_validate