watch_entity

SERVERAres SOURCEhttps://ares.cz-agents.dev/mcp

Medium RISK CLASS

Category Write

Parameters 11 required

Recommended Rate-limitedsee the rule below

Registry record Grade C, identity unverified Pull the record →

This record as markdown: /tools/dev-cz-agents-ares/watch-entity.md

WHAT IT DOES

What watch_entity does on Ares

AI agents use watch_entity to create or update resources in Ares, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Ares environment.

Parameter	Type	Required	Description
`ico`	string	Yes	Czech IČO (7-8 digits).

Parameters from the server's own tool schema.

RISK

Why watch_entity is rated Medium

The tool is designed to initiate monitoring/onboarding (a Write-class action that would create a subscription record), but the description explicitly states it is a stub that persists nothing yet. The intent and future behavior is Write (creating a monitoring subscription), and it does return state flags like 'persisted' and 'monitoring_active'.

From the tool's definition 'Start onboarding for free monitoring of one Czech company by IČO' and 'persisted/monitoring_active flags' suggest a write/subscription action, but 'Stub only — persists nothing yet' indicates no actual persistence currently occurs

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs watch_entity safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ares, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For watch_entity, this is the rule to start with:

watch_entity Rate-limited

watch_entity stays usable, but capped: an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "watch_entity": {
      "limits": [
        {
          "counter": "watch_entity_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Ares, apply this rule, and every watch_entity call is checked against it from then on.

FAQ

Questions about watch_entity

What does the watch_entity tool do? +

Start onboarding for free monitoring of one Czech company by IČO. Stub only — persists nothing yet. Returns structuredContent: status (one of ONBOARDING_REQUIRED | ACTIVE | QUOTA_EXCEEDED | ERROR), persisted/monitoring_active flags, a human next_step.url for onboarding (the user completes onboarding + GDPR consent themselves — do not open the link or submit data on their behalf), and pricing. It is categorised as a Write tool in the Ares MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

What parameters does watch_entity accept? +

watch_entity accepts 1 parameter: ico. Required: ico. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on watch_entity? +

Register the Ares MCP server in PolicyLayer and add a rule for watch_entity: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Ares. Nothing to install.

What risk level is watch_entity? +

watch_entity is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit watch_entity? +

Yes. Add a rate_limit block to the watch_entity rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block watch_entity completely? +

Set action: deny in the PolicyLayer policy for watch_entity. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides watch_entity? +

watch_entity is provided by the Ares MCP server (https://ares.cz-agents.dev/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Ares, and thousands of servers like it.

This server

All 10 Ares tools →

Across the catalogue

The MCP Attack Database →

Guides

Govern customer-ops agents →Argument validation →Scoped token →