create_repository

What create_repository does on Ncp

AI agents use create_repository to create or update resources in Ncp, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Ncp environment.

Why create_repository is rated Medium

Creating a repository is a reversible write operation—it creates a new resource on GitHub but does not destroy existing data or execute arbitrary code. It has medium severity because an AI agent misusing this tool could create numerous unwanted repositories, cluttering a GitHub account and potentially incurring organizational overhead, but the action can be undone by deleting the repositories.

From the tool's definition Tool name 'create_repository' and description 'Create a new GitHub repository' indicate creation of a new resource. This is a write operation that modifies state by adding a new repository to GitHub.

The rule that runs create_repository safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_repository, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_repository": {
      "limits": [
        {
          "counter": "create_repository_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_repository