public-tool
A tool with no authorities — accessible to everyone
This record as markdown: /tools/frontmcp/public-tool.md
What public-tool does on Frontmcp
AI agents call public-tool as a supporting operation in Frontmcp workflows.
Why public-tool is rated Low
The description states the tool has 'no authorities' and is accessible to everyone, but provides no information about what the tool actually does. There are no read, write, execute, destructive, or financial operations described. Given the complete lack of functional description, the safest classification is 'Other' with low confidence.
From the tool's definition A tool with no authorities — accessible to everyone
Attacks that exploit this kind of access
The rule that runs public-tool safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Frontmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For public-tool, this is the rule to start with:
public-tool gets a rate cap, and everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect Frontmcp, apply this rule, and every public-tool call is checked against it from then on.
Questions about public-tool
A tool with no authorities — accessible to everyone. It is categorised as a Other tool in the Frontmcp MCP Server, which means it performs auxiliary operations.
Register the Front MCP server in PolicyLayer and add a rule for public-tool: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Frontmcp. Nothing to install.
public-tool is a Other tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the public-tool rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for public-tool. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
public-tool is provided by the Front MCP server (agentfront/frontmcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Front, and thousands of servers like it.
This server
Across the catalogue