protect_update_known_face

What protect_update_known_face does on UniFi Access MCP

AI agents use protect_update_known_face to create or update resources in UniFi Access MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your UniFi Access MCP environment.

Why protect_update_known_face is rated Medium

The 'update' verb signals a Write operation that modifies stored data (facial recognition profiles). Since it concerns identity/access control data rather than deletion, it falls under Write rather than Destructive. Severity is medium because unauthorized facial data modification could compromise access control integrity and enable unauthorized access, but lacks the irreversibility of Destructive or financial impact.

From the tool's definition Tool name 'protect_update_known_face' indicates modification of facial recognition data ('update'). Empty description limits certainty. Context shows this is part of UniFi Access credential/identity management system.

The rule that runs protect_update_known_face safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For protect_update_known_face, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "protect_update_known_face": {
      "limits": [
        {
          "counter": "protect_update_known_face_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about protect_update_known_face