dispatch-capability-publish

What dispatch-capability-publish does on Nostr Bray

AI agents use dispatch-capability-publish to create or update resources in Nostr Bray, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Nostr Bray environment.

Why dispatch-capability-publish is rated Medium

The tool publishes agent capability information, which creates or modifies data on the network in a reversible manner (capabilities can be updated or removed). This is a write operation rather than destructive. Severity is medium because publishing capabilities could expose agent functionality in ways that enable subsequent misuse, but the act itself does not directly perform harm—it is informational.

From the tool's definition Tool name 'dispatch-capability-publish' and description 'Publish your agent' indicate a write/create operation that makes data publicly available on a Nostr-based network.

The rule that runs dispatch-capability-publish safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nostr Bray, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dispatch-capability-publish, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dispatch-capability-publish": {
      "limits": [
        {
          "counter": "dispatch-capability-publish_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about dispatch-capability-publish