reverse_resolve_ens · VaultPilot MCP: Risk & Policy

WHAT IT DOES

What reverse_resolve_ens does on VaultPilot MCP

AI agents use reverse_resolve_ens to create or update resources in VaultPilot MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your VaultPilot MCP environment.

PARAMETERS

Parameter	Type	Required	Description
`address`	object	Yes

Parameters from the server's own tool schema.

WHY IT NEEDS A POLICY

Why reverse_resolve_ens needs a policy

An AI agent can call reverse_resolve_ens faster than any human can review — one bad instruction and it creates or modifies resources in VaultPilot MCP by the hundred, each call as confident as the last.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

reverse_resolve_ens Rate-limited

reverse_resolve_ens stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "reverse_resolve_ens": {
      "limits": [
        {
          "counter": "reverse_resolve_ens_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches VaultPilot MCP, so you can run agents against it safely.

FAQ

Questions about reverse_resolve_ens

What does the reverse_resolve_ens tool do? +

Reverse-resolve an Ethereum address to its primary ENS name. Returns null if no primary name is set. It is categorised as a Write tool in the VaultPilot MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

What parameters does reverse_resolve_ens accept? +

reverse_resolve_ens accepts 1 parameter: address. Required: address. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on reverse_resolve_ens? +

Register the VaultPilot MCP server in PolicyLayer and add a rule for reverse_resolve_ens: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches VaultPilot MCP. Nothing to install.

What risk level is reverse_resolve_ens? +

reverse_resolve_ens is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit reverse_resolve_ens? +

Yes. Add a rate_limit block to the reverse_resolve_ens rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block reverse_resolve_ens completely? +

Set action: deny in the PolicyLayer policy for reverse_resolve_ens. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides reverse_resolve_ens? +

reverse_resolve_ens is provided by the VaultPilot MCP server (vaultpilot-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.