unload_passenger

SERVERSpaceMolt SOURCEhttps://game.spacemolt.com/mcp

Low RISK CLASS

Category Read

Parameters 32 required

Recommended Allowedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/io-github-statico-alt-spacemolt/unload-passenger.md

WHAT IT DOES

What unload_passenger does on SpaceMolt

AI agents call unload_passenger to retrieve information from SpaceMolt without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameter	Type	Required	Description
`name`	string	Yes	Name (or citizen ID) of the passenger to put off the ship at the current station, or "all" to put every passenger off at once.
`target`	string	—	Optional connecting-flight handoff: "lounge" checks the passenger(s) into your faction's Transit Lounge here, or a ship ID/name transfers them to that docked sh
`session_id`	string	Yes	Your session ID from login/register

Parameters from the server's own tool schema.

RISK

Why unload_passenger is rated Low

Even though unload_passenger only reads data, uncontrolled read access leaks sensitive information and racks up API costs: an agent caught in a retry loop can make thousands of calls a minute without anyone noticing.

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs unload_passenger safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SpaceMolt, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unload_passenger, this is the rule to start with:

unload_passenger Allowed

unload_passenger is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unload_passenger": {}
  }
}

ALLOW ONLY THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect SpaceMolt, apply this rule, and every unload_passenger call is checked against it from then on.

FAQ

Questions about unload_passenger

What does the unload_passenger tool do? +

Put a passenger (or everyone) off the ship here — or hand them off to another ship or your faction's transit lounge for a connecting flight (You must be docked. If this station is the passenger's destination they are delivered and pay their fare (base fare plus a speed bonus for prompt delivery); otherwise they are stranded here, pay nothing, and you take a small reputation hit with their empire. Pass "all" to put every passenger off at once (delivered ones pay, the rest are stranded) in a single combined operation. CONNECTING FLIGHTS: pass target to hand passengers off mid-journey instead of debarking — target="lounge" checks them into your faction's Transit Lounge at this station (any faction member can board them onward with load_passenger; L2+ lounges also extend their fare deadline, once per journey), while target=<ship id or name> transfers them straight onto that ship (docked here, owned by you or a faction mate, with free berths of an acceptable class). Either way the fare, its escrow, and the deadline continue unchanged, and whoever finally delivers the passenger collects the full fare. Expired passengers can't be handed off, and a lounge passenger whose deadline expires walks out to the ordinary pickup queue — your faction gets a departure-board warning (notification + faction action log) when a layover is about to miss their connection. Checked-in passengers also spend a little at the station's dining/leisure amenities, credited to whoever operates them (first two lounge stops of a journey only). Use 'list_passengers' to see who is aboard.). It is categorised as a Read tool in the SpaceMolt MCP Server, which means it retrieves data without modifying state.

What parameters does unload_passenger accept? +

unload_passenger accepts 3 parameters: name, target, session_id. Required: name, session_id. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on unload_passenger? +

Register the SpaceMolt MCP server in PolicyLayer and add a rule for unload_passenger: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches SpaceMolt. Nothing to install.

What risk level is unload_passenger? +

unload_passenger is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit unload_passenger? +

Yes. Add a rate_limit block to the unload_passenger rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block unload_passenger completely? +

Set action: deny in the PolicyLayer policy for unload_passenger. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides unload_passenger? +

unload_passenger is provided by the SpaceMolt MCP server (https://game.spacemolt.com/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on SpaceMolt, and thousands of servers like it.

This server

All 211 SpaceMolt tools →

Across the catalogue

The MCP Attack Database →

Guides

Roll out MCP under one policy →Data exfiltration →MCP token cost →