refresh_tagger_tags · Scryfall MCP Server MCP: Risk & Policy

WHAT IT DOES

What refresh_tagger_tags does on Scryfall MCP Server

AI agents use refresh_tagger_tags to create or update resources in Scryfall MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Scryfall MCP Server environment.

WHY IT NEEDS A POLICY

Why refresh_tagger_tags needs a policy

This tool writes data to local storage (cache) as a side effect of refreshing tags. It modifies cached state but does not delete data (not Destructive), execute arbitrary code (not Execute), or affect financial systems. The operation is reversible—cache can be refreshed or cleared.

From the tool's definition Tool description states it will 'write local cache', indicating a modification operation. The verb 'refresh' combined with 'write' indicates data is being created or updated locally.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

refresh_tagger_tags Rate-limited

refresh_tagger_tags stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "refresh_tagger_tags": {
      "limits": [
        {
          "counter": "refresh_tagger_tags_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Scryfall MCP Server, so you can run agents against it safely.

FAQ

Questions about refresh_tagger_tags

What does the refresh_tagger_tags tool do? +

Force refresh Tagger tags from docs and write local cache. It is categorised as a Write tool in the Scryfall MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on refresh_tagger_tags? +

Register the Scryfall MCP Server MCP server in PolicyLayer and add a rule for refresh_tagger_tags: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Scryfall MCP Server. Nothing to install.

What risk level is refresh_tagger_tags? +

refresh_tagger_tags is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit refresh_tagger_tags? +

Yes. Add a rate_limit block to the refresh_tagger_tags rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block refresh_tagger_tags completely? +

Set action: deny in the PolicyLayer policy for refresh_tagger_tags. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides refresh_tagger_tags? +

refresh_tagger_tags is provided by the Scryfall MCP Server MCP server (latte-chan/scryfall-connector). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.