# gluecron_comment_pr Add a comment to a pull request. Requires authenticated caller with write access. Returns {commentId}. Agent View of the PolicyLayer registry record for `gluecron_comment_pr`. HTML page: https://policylayer.com/tools/com-gluecron-gluecron/gluecron-comment-pr ## Facts - Tool: `gluecron_comment_pr` - Server: Gluecron (`https://gluecron.com/mcp`) — https://policylayer.com/tools/com-gluecron-gluecron.md - Homepage: https://github.com/https://gluecron.com/mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server rate-limited: yes - Parameters: 4 (4 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `body` | string | yes | Comment body (Markdown) | | `repo` | string | yes | Repo name | | `owner` | string | yes | Repo owner username | | `number` | number | yes | PR number | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "gluecron_comment_pr", "arguments": { "body": "", "repo": "", "owner": "", "number": 0 } } } ``` ## Why gluecron_comment_pr is rated Medium Adding a PR comment is a write operation that creates new content in the repository. While reversible and non-destructive, it can influence code review and project decisions if misused by an AI agent (e.g., spam, misleading feedback, or social engineering). Medium severity reflects the moderate blast radius of comment spam or manipulation in a collaborative code review context. From the tool's own definition: "Tool description states 'Add a comment to a pull request' — this creates new data (a comment) that is reversible (comments can be edited or deleted). Requires 'write access', confirming it modifies repository state." Risk signals: Accepts raw HTML/template content (body) ## Use case AI agents use gluecron_comment_pr to create or update resources in Gluecron, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Gluecron environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Gluecron: ```json { "version": "1", "default": "deny", "tools": { "gluecron_comment_pr": { "limits": [ { "counter": "gluecron_comment_pr_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Gluecron (59) - `gluecron_delete_file` — Destructive — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-delete-file.md - `gluecron_delete_repo` — Destructive — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-delete-repo.md - `gluecron_cancel_workflow_run` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-cancel-workflow-run.md - `gluecron_generate_tests` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-tests.md - `gluecron_merge_pr` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-merge-pr.md - `gluecron_provision_pr_sandbox` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-provision-pr-sandbox.md - `gluecron_refactor_across_repos` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-refactor-across-repos.md - `gluecron_trigger_workflow` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-trigger-workflow.md - `gluecron_ai_cost_summary` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-ai-cost-summary.md - `gluecron_clone_url` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-clone-url.md - `gluecron_explain_repo` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-explain-repo.md - `gluecron_find_symbol` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-find-symbol.md - `gluecron_generate_commit_message` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-commit-message.md - `gluecron_generate_release_notes` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-release-notes.md - `gluecron_get_agent_budget` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-agent-budget.md - `gluecron_get_commit` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-commit.md - `gluecron_get_pr` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-pr.md - `gluecron_get_preview_url` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-preview-url.md - `gluecron_get_workflow_logs` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-workflow-logs.md - `gluecron_get_workflow_run` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-workflow-run.md - `gluecron_list_prs` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-list-prs.md - `gluecron_list_tree` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-list-tree.md - `gluecron_pr_status_summary` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-pr-status-summary.md - `gluecron_read_file` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-read-file.md - `gluecron_repo_explain_codebase` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-explain-codebase.md - `gluecron_repo_health` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-health.md - `gluecron_repo_list_issues` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-list-issues.md - `gluecron_repo_read_file` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-read-file.md - `gluecron_repo_search` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-search.md - `gluecron_search_issues` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-search-issues.md - …and 29 more: https://policylayer.com/tools/com-gluecron-gluecron.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-gluecron-gluecron · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-gluecron-gluecron