vote · Reddirect MCP: Risk & Policy

WHAT IT DOES

What vote does on Reddirect

AI agents use vote to create or update resources in Reddirect — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Reddirect environment.

WHY IT NEEDS A POLICY

Why vote needs a policy

Voting is a modification action that creates or updates data (vote records) but is fully reversible—votes can be removed or changed at any time. This makes it Write rather than Execute or Destructive. The severity is low because the blast radius of misused votes is minimal (limited to voting behavior on a single post/comment per call, with no financial impact or data deletion).

From the tool's definition Tool description states it can 'Upvote, downvote, or remove your vote' on Reddit posts or comments. These are reversible modifications to voting state.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

vote Rate-limited

vote stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "vote": {
      "limits": [
        {
          "counter": "vote_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Reddirect, so you can run agents against it safely.

FAQ

Questions about vote

What does the vote tool do? +

Upvote, downvote, or remove your vote on a single Reddit post or comment. One vote per call. It is categorised as a Write tool in the Reddirect MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on vote? +

Register the Reddirect MCP server in PolicyLayer and add a rule for vote: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Reddirect. Nothing to install.

What risk level is vote? +

vote is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit vote? +

Yes. Add a rate_limit block to the vote rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block vote completely? +

Set action: deny in the PolicyLayer policy for vote. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides vote? +

vote is provided by the Reddirect MCP server (jeebus87/reddirect). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.