add_retention_policy

What add_retention_policy does on Mcpg

AI agents use add_retention_policy to create or update resources in Mcpg, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcpg environment.

Why add_retention_policy is rated Medium

The 'add_' prefix indicates a create/modify operation rather than read-only retrieval. This is a Write action because it establishes or changes a retention policy (reversible configuration change). Severity is medium because misconfigured retention policies could cause unintended data deletion over time, but the effect is not immediate or irreversible like Destructive operations.

From the tool's definition Tool name 'add_retention_policy' indicates creation or modification of a retention policy. The empty description prevents full certainty, but the verb 'add' combined with 'policy' in a database context strongly suggests a write operation that creates or…

The rule that runs add_retention_policy safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcpg, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For add_retention_policy, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_retention_policy": {
      "limits": [
        {
          "counter": "add_retention_policy_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about add_retention_policy