arvan_attach_security_group_to_server

What arvan_attach_security_group_to_server does on ArvanCloud MCP Server

AI agents use arvan_attach_security_group_to_server to create or update resources in ArvanCloud MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ArvanCloud MCP Server environment.

Why arvan_attach_security_group_to_server is rated Medium

This tool modifies server security group configuration, which is a reversible write operation that changes firewall/access rules. While not destructive (the change can be reversed by detaching), it has high severity because misconfiguration directly impacts server security posture and access control—an AI agent could unintentionally expose a server to unauthorized access or lock out legitimate traffic.

From the tool's definition Tool name 'arvan_attach_security_group_to_server' and description 'Attach a security group to a server' indicate modification of server security configuration. 'Attach' is a write operation that modifies network/security policies on a live server.

The rule that runs arvan_attach_security_group_to_server safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ArvanCloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For arvan_attach_security_group_to_server, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "arvan_attach_security_group_to_server": {
      "limits": [
        {
          "counter": "arvan_attach_security_group_to_server_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about arvan_attach_security_group_to_server