bolsa_users_update

What bolsa_users_update does on Bolsa De Carga

AI agents use bolsa_users_update to create or update resources in Bolsa De Carga, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Bolsa De Carga environment.

Why bolsa_users_update is rated Medium

This tool creates or modifies data reversibly, fitting the Write category. Severity is medium because misuse could alter user credentials, contact details, or business settings in a freight marketplace, potentially disrupting operations or enabling account takeover if combined with other exploits, but the impact is limited to a single user profile and changes are reversible.

From the tool's definition Tool name 'bolsa_users_update' and description 'Update authenticated user profile' indicate modification of user account data. The action is reversible (profile fields can be changed again) and affects only the authenticated user's own account.

The rule that runs bolsa_users_update safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Bolsa De Carga, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bolsa_users_update, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bolsa_users_update": {
      "limits": [
        {
          "counter": "bolsa_users_update_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about bolsa_users_update