accept_handoff · Agent-Comm-Hub MCP: Risk & Policy

WHAT IT DOES

What accept_handoff does on Agent-Comm-Hub

AI agents use accept_handoff to create or update resources in Agent-Comm-Hub — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Agent-Comm-Hub environment.

WHY IT NEEDS A POLICY

Why accept_handoff needs a policy

This tool modifies task state by reassigning ownership, which is a reversible write operation. It has high severity because unauthorized handoff acceptance could allow an agent to claim tasks it shouldn't own, disrupting task orchestration and potentially enabling privilege escalation or task hijacking in a multi-agent system.

From the tool's definition Tool accepts a task handoff, transferring task ownership (assigned_to field) from one agent to another. The description states '接受任务交接' (accept task handoff) and 'assigned_to 转移到当前 Agent' (assigned_to transfers to current Agent), indicating modification of…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

accept_handoff Rate-limited

accept_handoff stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "accept_handoff": {
      "limits": [
        {
          "counter": "accept_handoff_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Agent-Comm-Hub, so you can run agents against it safely.

FAQ

Questions about accept_handoff

What does the accept_handoff tool do? +

接受任务交接。只有被请求的 target Agent 可以调用。接受后任务 assigned_to 转移到当前 Agent。. It is categorised as a Write tool in the Agent-Comm-Hub MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on accept_handoff? +

Register the Agent-Comm-Hub MCP server in PolicyLayer and add a rule for accept_handoff: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Agent-Comm-Hub. Nothing to install.

What risk level is accept_handoff? +

accept_handoff is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit accept_handoff? +

Yes. Add a rate_limit block to the accept_handoff rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block accept_handoff completely? +

Set action: deny in the PolicyLayer policy for accept_handoff. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides accept_handoff? +

accept_handoff is provided by the Agent-Comm-Hub MCP server (liuboacean/agent-comm-hub). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.