Medium Risk

resolve-library-id

Resolves a package/product name to a Context7-compatible library ID and returns a list of matching libraries. You MUST call this function before 'get-library-docs' to obtain a valid Context7-compatible library ID UNLESS the user explicitly provides a library ID in the format '/org/project' or '/...

Part of the Context7 Library Docs MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.

chuhuoyuan/context7 Write Risk 2/5

AI agents use resolve-library-id to create or modify resources in Context7 Library Docs. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call resolve-library-id repeatedly, creating or modifying resources faster than any human could review. Intercept's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach Context7 Library Docs.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

chuhuoyuan-context7.yaml
tools:
  resolve-library-id:
    rules:
      - action: allow
        rate_limit:
          max: 30
          window: 60

See the full Context7 Library Docs policy for all 2 tools.

Tool Name resolve-library-id
Category Write
Risk Level Medium

Agents calling write-class tools like resolve-library-id have been implicated in these attack patterns. Read the full case and prevention policy for each:

Browse the full MCP Attack Database →

Other tools in the Write risk category across the catalogue. The same policy patterns (rate-limit, validate) apply to each.

What does the resolve-library-id tool do? +

Resolves a package/product name to a Context7-compatible library ID and returns a list of matching libraries. You MUST call this function before 'get-library-docs' to obtain a valid Context7-compatible library ID UNLESS the user explicitly provides a library ID in the format '/org/project' or '/org/project/version' in their query. Selection Process: 1. Analyze the query to understand what library/package the user is looking for 2. Return the most relevant match based on: - Name similarity to the query (exact matches prioritized) - Description relevance to the query's intent - Documentation coverage (prioritize libraries with higher Code Snippet counts) - Trust score (consider libraries with scores of 7-10 more authoritative) Response Format: - Return the selected library ID in a clearly marked section - Provide a brief explanation for why this library was chosen - If multiple good matches exist, acknowledge this but proceed with the most relevant one - If no good matches exist, clearly state this and suggest query refinements For ambiguous queries, request clarification before proceeding with a best-guess match.. It is categorised as a Write tool in the Context7 Library Docs MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on resolve-library-id? +

Add a rule in your Intercept YAML policy under the tools section for resolve-library-id. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the Context7 Library Docs MCP server.

What risk level is resolve-library-id? +

resolve-library-id is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit resolve-library-id? +

Yes. Add a rate_limit block to the resolve-library-id rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block resolve-library-id completely? +

Set action: deny in the Intercept policy for resolve-library-id. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides resolve-library-id? +

resolve-library-id is provided by the Context7 Library Docs MCP server (chuhuoyuan/context7). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policies on Context7 Library Docs

Open source. One binary. Zero dependencies.

npx -y @policylayer/intercept
github.com/policylayer/intercept →
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.