# add_issue_comment Add a comment to an issue or pull request. Agent View of the PolicyLayer registry record for `add_issue_comment`. HTML page: https://policylayer.com/tools/io-github-abhishekkumar2021-github/add-issue-comment ## Facts - Tool: `add_issue_comment` - Server: GitHub (`@abhishekmcp/github`) — https://policylayer.com/tools/io-github-abhishekkumar2021-github.md - Install: `npx -y @abhishekmcp/github` - Homepage: https://github.com/Abhishekkumar2021/mcp-suite - Risk category: Write (Medium risk) - Registry record: grade D, identity unverified - Server rate-limited: no - Parameters: 4 (4 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `body` | string | yes | | | `repo` | string | yes | Repository name | | `owner` | string | yes | Repository owner (user or org) | | `number` | integer | yes | | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "add_issue_comment", "arguments": { "body": "", "repo": "", "owner": "", "number": 0 } } } ``` ## Why add_issue_comment is rated Medium This tool creates new content (a comment) on GitHub, modifying an issue or PR in a way that persists and is visible to others. However, it is not destructive (comments are not permanently deleted by this action), not financial, and not code execution. From the tool's own definition: "Tool description states 'Add a comment to an issue or pull request.' The verb 'Add' indicates creation of new data (a comment). This is reversible—comments can be edited or deleted later." Risk signals: Accepts raw HTML/template content (body) ## Use case AI agents use add_issue_comment to create or update resources in GitHub, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your GitHub environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GitHub: ```json { "version": "1", "default": "deny", "tools": { "add_issue_comment": { "limits": [ { "counter": "add_issue_comment_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on GitHub (15) - `github_logout` — Destructive — https://policylayer.com/tools/io-github-abhishekkumar2021-github/github-logout.md - `github_login` — Other — https://policylayer.com/tools/io-github-abhishekkumar2021-github/github-login.md - `get_file_contents` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/get-file-contents.md - `get_issue` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/get-issue.md - `get_pull_request` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/get-pull-request.md - `get_repo` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/get-repo.md - `list_issues` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/list-issues.md - `list_notifications` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/list-notifications.md - `list_pull_requests` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/list-pull-requests.md - `rate_limit` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/rate-limit.md - `search_code` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/search-code.md - `search_issues` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/search-issues.md - `search_repos` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/search-repos.md - `whoami` — Read — https://policylayer.com/tools/io-github-abhishekkumar2021-github/whoami.md - `create_issue` — Write — https://policylayer.com/tools/io-github-abhishekkumar2021-github/create-issue.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-abhishekkumar2021-github · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-abhishekkumar2021-github