merge_json

Merge two JSON objects with deep or shallow strategy.

SERVERGadgetHumans API Hub SOURCEpypi:gadgethumans-api-hub-mcp

Medium RISK CLASS

Category Write

Parameters 00 required

Recommended Rate-limitedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/io-github-scotia1973-bot-api-hub/merge-json.md

WHAT IT DOES

What merge_json does on GadgetHumans API Hub

AI agents use merge_json to create or update resources in GadgetHumans API Hub, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your GadgetHumans API Hub environment.

RISK

Why merge_json is rated Medium

The tool combines JSON objects, resulting in a new or modified JSON structure. This is a reversible data modification operation (Write category). Severity is low because: (1) the operation is local to the provided JSON inputs with no persistence implied, (2) no destructive capability (data not deleted), (3) no external side effects or code execution, (4) no financial impact.

From the tool's definition Tool performs JSON merge operation, which creates or modifies data. Description states 'Merge two JSON objects' indicating data transformation/modification.

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs merge_json safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GadgetHumans API Hub, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For merge_json, this is the rule to start with:

merge_json Rate-limited

merge_json stays usable, but capped: an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "merge_json": {
      "limits": [
        {
          "counter": "merge_json_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect GadgetHumans API Hub, apply this rule, and every merge_json call is checked against it from then on.

FAQ

Questions about merge_json

What does the merge_json tool do? +

Merge two JSON objects with deep or shallow strategy. It is categorised as a Write tool in the GadgetHumans API Hub MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on merge_json? +

Register the GadgetHumans API Hub MCP server in PolicyLayer and add a rule for merge_json: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches GadgetHumans API Hub. Nothing to install.

What risk level is merge_json? +

merge_json is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit merge_json? +

Yes. Add a rate_limit block to the merge_json rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block merge_json completely? +

Set action: deny in the PolicyLayer policy for merge_json. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides merge_json? +

merge_json is provided by the GadgetHumans API Hub MCP server (pypi:gadgethumans-api-hub-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on GadgetHumans API Hub, and thousands of servers like it.

This server

All 311 GadgetHumans API Hub tools →

Across the catalogue

The MCP Attack Database →

Guides

Govern customer-ops agents →Argument validation →Scoped token →