bolsa_users-management_update

What bolsa_users-management_update does on Bolsa De Carga

AI agents use bolsa_users-management_update to create or update resources in Bolsa De Carga, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Bolsa De Carga environment.

Why bolsa_users-management_update is rated Medium

This tool creates or modifies user data reversibly, placing it in the Write category. Severity is high because: (1) user profiles typically contain sensitive personal/account information, (2) unauthorized profile modifications could cause account compromise or identity fraud, (3) the admin-only restriction suggests the system recognizes the sensitivity. It is not Destructive since updates are generally reversible.

From the tool's definition Tool name contains 'update' and description states it modifies 'user profile'. The '(Admin only)' restriction indicates access control over sensitive identity/account data.

Risk signalsAdmin/system-level operation

The rule that runs bolsa_users-management_update safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Bolsa De Carga, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bolsa_users-management_update, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bolsa_users-management_update": {
      "limits": [
        {
          "counter": "bolsa_users-management_update_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about bolsa_users-management_update