get_satellite_image
skypeek: Get a recent satellite image of a place or coordinates. For the forecast use get_weather. Returns a recent satellite picture of a place as a base64 PNG, with the capture date, cloud cover, source and attribution: the least cloudy recent Sentinel-2 L2A scene at 10 m per pixel as true colo...
This record as markdown: /tools/dev-tanod-tanod/get-satellite-image.md
What get_satellite_image does on Tanod
AI agents call get_satellite_image to retrieve information from Tanod without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
| Parameter | Type | Required | Description |
|---|---|---|---|
lat | object | — | Latitude in degrees (-90 to 90). Send lat and lon, or place. |
lon | object | — | Longitude in degrees (-180 to 180). Send lat and lon, or place. |
date | object | — | Target day YYYY-MM-DD (2015-07 onward, not in the future): the nearest scene within 15 days that is clear enough. Default: the newest clear scene of the last 60 |
size | integer | — | Width and height of the PNG in pixels (128-1024, default 512). |
view | string | — | true_color (a natural-colour picture), ndvi (vegetation) or ndwi (open water), both computed from the same Sentinel-2 scene with clouds painted grey. |
place | object | — | City name, optionally with a country code (such as Manila, PH); cities of 15,000+ people. Send place, or lat and lon. |
radius_m | number | — | Half the side of the pictured square, in metres (250-100000, default 2560: about 10 m per pixel at 512 px). Over 10000 is NASA 250 m true colour only. |
max_cloud | number | — | Most cloud accepted, as a percent of the pictured area (0-100, default 30). No scene that clear is a 404 too_cloudy (not charged). |
Parameters from the server's own tool schema.
Why get_satellite_image is rated Low
Even though get_satellite_image only reads data, uncontrolled read access leaks sensitive information and racks up API costs: an agent caught in a retry loop can make thousands of calls a minute without anyone noticing.
Attacks that exploit this kind of access
The rule that runs get_satellite_image safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Tanod, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_satellite_image, this is the rule to start with:
get_satellite_image is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect Tanod, apply this rule, and every get_satellite_image call is checked against it from then on.
Questions about get_satellite_image
skypeek: Get a recent satellite image of a place or coordinates. For the forecast use get_weather. Returns a recent satellite picture of a place as a base64 PNG, with the capture date, cloud cover, source and attribution: the least cloudy recent Sentinel-2 L2A scene at 10 m per pixel as true colour, NDVI (vegetation) or NDWI (water), clouds painted grey in the index views; NASA GIBS true colour (about 250 m) for areas wider than 10 km or when Sentinel-2 has no scene. Not real time (date is the scene day); clouds can hide the ground (404 too_cloudy, no_scene, no_imagery: not charged). Sentinel-2 data is free to use with credit; NASA GIBS has no restrictions. Not for navigation or safety. Typically 5 to 25 s (a few Sentinel-2 tiles are read and rendered). Price: USD 0.01. Free: 5 skypeek calls per IP per UTC day. Docs: https://tanod.dev/learn/satellite-image-api.html. It is categorised as a Read tool in the Tanod MCP Server, which means it retrieves data without modifying state.
get_satellite_image accepts 8 parameters: lat, lon, date, size, view, place, radius_m, max_cloud. The full parameter table on this page comes from the server's own tool schema.
Register the Tanod MCP server in PolicyLayer and add a rule for get_satellite_image: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Tanod. Nothing to install.
get_satellite_image is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the get_satellite_image rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for get_satellite_image. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
get_satellite_image is provided by the Tanod MCP server (https://tanod.dev/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Tanod, and thousands of servers like it.
This server
Across the catalogue