Medium Risk

property_comps

Comparable sales from Land Registry Price Paid Data. Defaults return the standard residential set: - property_type=None means residential (F+D+S+T). Pass "F"/"D"/"S"/"T"/"O" for a single type, or "ALL" to disable type filtering (firehose). - transaction_category defaults to "A" (standard sales). ...

Part of the UK Property Data server.

property_comps can modify UK Property Data data, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE UK PROPERTY DATA →

Free to start. No card required.

AI agents use property_comps to create or modify resources in UK Property Data. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call property_comps repeatedly, creating or modifying resources faster than any human could review. PolicyLayer's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach UK Property Data.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "property_comps": {
      "limits": [
        {
          "counter": "property_comps_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

See the full UK Property Data policy for all 13 tools.

Get this rule live on your own UK Property Data server in minutes. PolicyLayer enforces it on every call, before it runs.

ENFORCE ON MY UK PROPERTY DATA →

View all 13 tools →

These attack patterns abuse exactly the kind of access property_comps gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

Every attack above starts with a tool call. PolicyLayer checks each one against your policy first, so property_comps only ever does what you allow.

SECURE UK PROPERTY DATA →

Other write tools across the catalogue. The same approach applies to each: rate-limit and validate the arguments.

What does the property_comps tool do? +

Comparable sales from Land Registry Price Paid Data. Defaults return the standard residential set: - property_type=None means residential (F+D+S+T). Pass "F"/"D"/"S"/"T"/"O" for a single type, or "ALL" to disable type filtering (firehose). - transaction_category defaults to "A" (standard sales). Pass None to include category-B (bulk transfers, non-standard conveyances). - filter_outliers=False by default; set True for IQR-trimmed stats AND transaction list (1.5*IQR rule, needs >=4 prices). limit caps returned transactions (max 200). enrich_epc attaches EPC floor area and price-per-sqft to each transaction — slower but richer.. It is categorised as a Write tool in the UK Property Data MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on property_comps? +

Register the UK Property Data MCP server in PolicyLayer and add a rule for property_comps: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches UK Property Data. Nothing to install.

What risk level is property_comps? +

property_comps is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit property_comps? +

Yes. Add a rate_limit block to the property_comps rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block property_comps completely? +

Set action: deny in the PolicyLayer policy for property_comps. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides property_comps? +

property_comps is provided by the UK Property Data MCP server (pypi:property-shared). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every UK Property Data tool call.

Deterministic rules across all 13 UK Property Data tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.