label-create

What label-create does on Lint

AI agents use label-create to create or update resources in Lint, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Lint environment.

Why label-create is rated Medium

This is a Write operation because it creates new data (a repository label) with reversible effects—labels can be deleted or modified afterward. It does not execute arbitrary code, delete data permanently, or move money. Severity is medium because misuse could clutter or misconfigure repository labels, but the impact is limited to label metadata and does not affect code, data integrity, or financial systems.

From the tool's definition Tool creates a new repository label, which modifies repository metadata. The description states it 'Creates a new repository label' and 'Returns structured data with label name, description, color, and URL', indicating a create operation that persists data to…

The rule that runs label-create safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Lint, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For label-create, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "label-create": {
      "limits": [
        {
          "counter": "label-create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about label-create