api

What api does on Cargo

AI agents invoke api to trigger actions in Cargo. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why api is rated High

A tool that makes arbitrary GitHub API calls can span Read, Write, Destructive, and potentially other severe operations depending on the endpoint and method used. Since the tool is unrestricted ('arbitrary'), the most severe plausible category applies. GitHub API calls can modify repositories, delete branches, manage secrets, trigger workflows, etc.

From the tool's definition 'Makes arbitrary GitHub API calls via' — the description is truncated/incomplete, but 'arbitrary GitHub API calls' implies the tool can perform any GitHub API operation including writes, deletions, and administrative actions beyond simple reads.

The rule that runs api safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cargo, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For api, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "api": {
      "limits": [
        {
          "counter": "api_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about api