consumer_onboarding · Kiln MCP: Risk & Policy

WHAT IT DOES

What consumer_onboarding does on Kiln

AI agents call consumer_onboarding as a supporting operation in Kiln workflows.

WHY IT NEEDS A POLICY

Why consumer_onboarding needs a policy

The description is empty and uninformative, making it impossible to determine what the tool does with confidence. The name 'consumer_onboarding' suggests some kind of user setup or registration flow, which could be a Write operation, but without any description, the category and severity cannot be reliably determined. Defaulting to Other with low confidence.

From the tool's definition Tool name is 'consumer_onboarding' with an empty description. No functional details are provided.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

consumer_onboarding Rate-limited

consumer_onboarding gets a rate cap, and everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "consumer_onboarding": {
      "limits": [
        {
          "counter": "consumer_onboarding_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}

SET A RULE FOR THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Kiln, so you can run agents against it safely.

FAQ

Questions about consumer_onboarding

What does the consumer_onboarding tool do? +

consumer_onboarding. It is categorised as a Other tool in the Kiln MCP Server, which means it performs auxiliary operations.

How do I enforce a policy on consumer_onboarding? +

Register the Kiln MCP server in PolicyLayer and add a rule for consumer_onboarding: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Kiln. Nothing to install.

What risk level is consumer_onboarding? +

consumer_onboarding is a Other tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit consumer_onboarding? +

Yes. Add a rate_limit block to the consumer_onboarding rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block consumer_onboarding completely? +

Set action: deny in the PolicyLayer policy for consumer_onboarding. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides consumer_onboarding? +

consumer_onboarding is provided by the Kiln MCP server (codeofaxel/Kiln). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.