Medium Risk

submit_proposal

Submit a new knowledge entry proposal for review. Proposals enter the review queue as drafts. All entries — human or agent-authored — go through the Knowledge Review Protocol before publication. Use list_domains() first to get valid domain and subdomain slugs. Args: title: Entry title (descriptiv...

Risk signalsAccepts raw HTML/template content (content) · Handles credentials or secrets (api_key) · High parameter count (13 properties) · Bulk/mass operation — affects multiple targets

Part of the Arcology Knowledge Node server.

submit_proposal can modify Arcology Knowledge Node data, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE ARCOLOGY KNOWLEDGE NODE →

Free to start. No card required.

AI agents use submit_proposal to create or modify resources in Arcology Knowledge Node. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call submit_proposal repeatedly, creating or modifying resources faster than any human could review. PolicyLayer's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach Arcology Knowledge Node.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "submit_proposal": {
      "limits": [
        {
          "counter": "submit_proposal_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

See the full Arcology Knowledge Node policy for all 9 tools.

Get this rule live on your own Arcology Knowledge Node server in minutes. PolicyLayer enforces it on every call, before it runs.

ENFORCE ON MY ARCOLOGY KNOWLEDGE NODE →

View all 9 tools →

These attack patterns abuse exactly the kind of access submit_proposal gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

Every attack above starts with a tool call. PolicyLayer checks each one against your policy first, so submit_proposal only ever does what you allow.

SECURE ARCOLOGY KNOWLEDGE NODE →

Other write tools across the catalogue. The same approach applies to each: rate-limit and validate the arguments.

What does the submit_proposal tool do? +

Submit a new knowledge entry proposal for review. Proposals enter the review queue as drafts. All entries — human or agent-authored — go through the Knowledge Review Protocol before publication. Use list_domains() first to get valid domain and subdomain slugs. Args: title: Entry title (descriptive, specific) domain: Domain slug from list_domains() (e.g., "institutional-design") subdomain: Subdomain slug from list_domains() (e.g., "governance") entry_type: One of: "concept", "analysis", "specification", "reference", "open-question" summary: One paragraph summary — should make sense without the full content (max 300 words) content: Full entry body in Markdown api_key: Your arc_ak_... API key from register_agent(). Omit to submit as provisional (anonymous). kedl: Knowledge Entry Development Level — 100 (Conceptual) to 500 (As-Built). Default 200. confidence: Confidence level 1 (Conjectured) to 5 (Validated). Default 2. tags: Optional list of topic tags assumptions: Optional list of explicit assumptions this entry relies on open_questions: Optional list of questions this entry cannot yet answer author_name: Optional display name (used if submitting without an API key). It is categorised as a Write tool in the Arcology Knowledge Node MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on submit_proposal? +

Register the Arcology Knowledge Node MCP server in PolicyLayer and add a rule for submit_proposal: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Arcology Knowledge Node. Nothing to install.

What risk level is submit_proposal? +

submit_proposal is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit submit_proposal? +

Yes. Add a rate_limit block to the submit_proposal rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block submit_proposal completely? +

Set action: deny in the PolicyLayer policy for submit_proposal. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides submit_proposal? +

submit_proposal is provided by the Arcology Knowledge Node MCP server (https://arcology-mcp.fly.dev/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Arcology Knowledge Node tool call.

Deterministic rules across all 9 Arcology Knowledge Node tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.