Medium Risk

reachable_techniques

Given a rack (the module ids the user owns), return which canonical patch techniques the rack can realize, and which it is one module away from. The set-level companion to find_role_realizations: where that answers "which module fills role R in technique T?", this answers the rack owner's actual ...

Part of the Eurorack server.

reachable_techniques can modify Eurorack data, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE EURORACK →

Free to start. No card required.

AI agents use reachable_techniques to create or modify resources in Eurorack. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call reachable_techniques repeatedly, creating or modifying resources faster than any human could review. PolicyLayer's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach Eurorack.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "reachable_techniques": {
      "limits": [
        {
          "counter": "reachable_techniques_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

See the full Eurorack policy for all 17 tools.

Get this rule live on your own Eurorack server in minutes. PolicyLayer enforces it on every call, before it runs.

ENFORCE ON MY EURORACK →

View all 17 tools →

These attack patterns abuse exactly the kind of access reachable_techniques gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

Every attack above starts with a tool call. PolicyLayer checks each one against your policy first, so reachable_techniques only ever does what you allow.

SECURE EURORACK →

Other write tools across the catalogue. The same approach applies to each: rate-limit and validate the arguments.

What does the reachable_techniques tool do? +

Given a rack (the module ids the user owns), return which canonical patch techniques the rack can realize, and which it is one module away from. The set-level companion to find_role_realizations: where that answers "which module fills role R in technique T?", this answers the rack owner's actual question — "given everything I own, what can I actually do, and what am I close to?". This is the right tool the moment a user gives you their modules and asks an open "what can I do / what can this rack do / what am I missing?" question — instead of guessing techniques from training priors or calling find_role_realizations technique-by-technique by hand. It runs the affordance match across the whole technique catalog for you. Returns two buckets: - reachable: every required role has a rack module that fills it. Each carries an assignment (role → module). requires_shared_module: true flags a technique only reachable by reusing one module for two roles — verify those roles can share one instance. - near_misses: all-but-one role fillable; missing_roles names the unfilled role(s) and the required_affordances you'd need. This is the acquisition signal — "you can already do X; you're one <affordance> module away from Y". Args: - rack (string[], required): module ids, e.g. ["make-noise/maths", "mutable-instruments/plaits"]. Max 64. Ids that match no module are returned in unresolved (with did-you-mean), not silently dropped. - limit (number): max techniques per bucket. Default 25, max 100. Stateless-rack contract: the server keeps no memory of your rack between calls — pass the COMPLETE current rack every call. A partial rack silently narrows what's reported reachable, so if a module id doesn't resolve, surface the unresolved did-you-mean to the user rather than proceeding on the incomplete set. Scope: reachability is role-PRESENCE based. It does NOT verify per-role instance counts (cardinality) — a technique needing two independent envelopes is judged reachable if you have one envelope source. The distinct-instance question (can one module fill two roles?) is surfaced as requires_shared_module, not silently assumed. For the editorial detail on a specific technique (canonical instance, counter-canonical notes, full realization list), call list_techniques; for one role's candidates, find_role_realizations. To go the other way — which of your modules are redundant / safe to sell — call rack_redundancy.. It is categorised as a Write tool in the Eurorack MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on reachable_techniques? +

Register the Eurorack MCP server in PolicyLayer and add a rule for reachable_techniques: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Eurorack. Nothing to install.

What risk level is reachable_techniques? +

reachable_techniques is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit reachable_techniques? +

Yes. Add a rate_limit block to the reachable_techniques rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block reachable_techniques completely? +

Set action: deny in the PolicyLayer policy for reachable_techniques. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides reachable_techniques? +

reachable_techniques is provided by the Eurorack MCP server (https://eurorackref.com/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Eurorack tool call.

Deterministic rules across all 17 Eurorack tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.