bolsa_users-lifecycle_change

What bolsa_users-lifecycle_change does on Bolsa De Carga

AI agents use bolsa_users-lifecycle_change to create or update resources in Bolsa De Carga, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Bolsa De Carga environment.

Why bolsa_users-lifecycle_change is rated Medium

This tool creates or modifies user account status (write operation) rather than reading, executing arbitrary code, or destructively deleting. The blast radius is high because changing user status could lock accounts, revoke access, or escalate privileges if misused by a compromised admin context, but the operation remains reversible (e.g., status can be re-enabled).

From the tool's definition 'Change user status (Admin only)' — modifies user account state, a reversible but significant operation on user lifecycle data. The 'Admin only' restriction indicates elevated privilege required.

Risk signalsAdmin/system-level operation

The rule that runs bolsa_users-lifecycle_change safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Bolsa De Carga, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bolsa_users-lifecycle_change, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bolsa_users-lifecycle_change": {
      "limits": [
        {
          "counter": "bolsa_users-lifecycle_change_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about bolsa_users-lifecycle_change