topic_create · HashPilot MCP: Risk & Policy

WHAT IT DOES

What topic_create does on HashPilot

AI agents use topic_create to create or update resources in HashPilot — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your HashPilot environment.

WHY IT NEEDS A POLICY

Why topic_create needs a policy

Thi s too l create s a new HCS topic, which is a write operation - it modifies the blockchain state by adding a new entity. The severity is medium rather than high because: (1) the operation is reversible (topics can be managed/removed), (2) the primary risk is financial (creating topics may incur small fees on Hedera), but this is mitigated by the transparency of blockchain operations, and (3) an AI agent could…

From the tool's definition Cr eat e a new HCS ( Her dera Cons ensus Ser vice) topic for pu bli shing me ssa ges. The ' create' action is explicitly reversible; topics can be deleted (implied by the broader topic management tools on the server), and the operation creates a new…

Risk signalsAdmin/system-level operation

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

topic_create Rate-limited

topic_create stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "topic_create": {
      "limits": [
        {
          "counter": "topic_create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches HashPilot, so you can run agents against it safely.

FAQ

Questions about topic_create

What does the topic_create tool do? +

Create a new HCS (Hedera Consensus Service) topic for publishing messages. Topics can be public (anyone can submit) or private (requires submit key). Admin and submit keys use operator key when enabled. It is categorised as a Write tool in the HashPilot MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on topic_create? +

Register the HashPilot MCP server in PolicyLayer and add a rule for topic_create: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches HashPilot. Nothing to install.

What risk level is topic_create? +

topic_create is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit topic_create? +

Yes. Add a rate_limit block to the topic_create rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block topic_create completely? +

Set action: deny in the PolicyLayer policy for topic_create. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides topic_create? +

topic_create is provided by the HashPilot MCP server (justmert/hashpilot). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.