update_agent

What update_agent does on ProAgentStore

AI agents use update_agent to create or update resources in ProAgentStore, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ProAgentStore environment.

Why update_agent is rated Medium

This tool modifies existing agent data/configuration, which is a Write operation. Severity is high because unauthorized agent updates could redirect agent behavior, modify permissions, or compromise agent integrity in a multi-agent system. Confidence is 0.85 (not higher) because the description lacks specificity about what aspects of an agent can be updated and what side effects might occur.

From the tool's definition Tool name 'update_agent' and description 'Update an agent' indicate modification of agent configuration or state. The action is reversible (update, not delete) and operates on agent resources within the control plane.

The rule that runs update_agent safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ProAgentStore, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_agent, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_agent": {
      "limits": [
        {
          "counter": "update_agent_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_agent