ask_humotica · Jis MCP: Risk & Policy

WHAT IT DOES

What ask_humotica does on Jis

AI agents invoke ask_humotica to trigger actions in Jis. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why ask_humotica needs a policy

The tool sends a query to an external service (Humotica) and retrieves a response using a bilateral intent verification protocol. While it has a read-like surface (asking a question), it involves triggering an external operation with side effects (JIS bilateral intent handshake, verified communication). This places it in Execute rather than Read.

From the tool's definition 'Ask a verified question to Humotica. Uses JIS bilateral intent to ensure authentic response.' — triggers an external operation (sending a query to the Humotica service) with effects depending on the question argument.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

ask_humotica Rate-limited

ask_humotica stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "ask_humotica": {
      "limits": [
        {
          "counter": "ask_humotica_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Jis, so you can run agents against it safely.

FAQ

Questions about ask_humotica

What does the ask_humotica tool do? +

Ask a verified question to Humotica. Uses JIS bilateral intent to ensure authentic response. Great for asking about TIBET, JIS, the Intent-Centric Web, or HumoticaOS. It is categorised as a Execute tool in the Jis MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on ask_humotica? +

Register the Jis MCP server in PolicyLayer and add a rule for ask_humotica: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Jis. Nothing to install.

What risk level is ask_humotica? +

ask_humotica is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit ask_humotica? +

Yes. Add a rate_limit block to the ask_humotica rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block ask_humotica completely? +

Set action: deny in the PolicyLayer policy for ask_humotica. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides ask_humotica? +

ask_humotica is provided by the Jis MCP server (jaspertvdm/mcp-server-jis). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.