postgresql_bind_user

What postgresql_bind_user does on 1Panel MCP Server

AI agents use postgresql_bind_user to create or update resources in 1Panel MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your 1Panel MCP Server environment.

Why postgresql_bind_user is rated Medium

Creating a PostgreSQL user is a reversible Write operation: the user account can be modified or dropped later. However, it carries high severity because an AI agent creating arbitrary database users could grant excessive permissions, expose credentials, enable unauthorized access, or create dormant accounts for lateral movement. The blast radius extends to database security posture and access control integrity.

From the tool's definition Tool name 'postgresql_bind_user' with description 'Bind/create user' indicates creation of a database user account. 'Bind' and 'create' are Write operations that modify database state by adding a new user with associated permissions and credentials.

The rule that runs postgresql_bind_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 1Panel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For postgresql_bind_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "postgresql_bind_user": {
      "limits": [
        {
          "counter": "postgresql_bind_user_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about postgresql_bind_user