issue-create

What issue-create does on Go

AI agents use issue-create to create or update resources in Go, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Go environment.

Why issue-create is rated Medium

This tool creates new data (a GitHub or similar issue) reversibly. It does not execute arbitrary code, delete data irreversibly, or move money. The blast radius is medium because creating spurious issues could clutter a tracker or trigger automation, but the operation is non-destructive and can be undone. Classified as Write rather than Execute because the operation is data creation, not code/command execution.

From the tool's definition Tool name 'issue-create' and description 'Creates a new issue' indicate the tool creates new data in an issue tracking system, returning issue number, URL, and labels. This is a reversible modification operation (issues can be deleted or edited afterward).

The rule that runs issue-create safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Go, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For issue-create, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "issue-create": {
      "limits": [
        {
          "counter": "issue-create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about issue-create