Low Risk

sp_analyze

Analyze HTML and recommend which stitch-pro tools to run. Detects accessibility issues, missing responsiveness, framework conversion opportunities, and component library mapping potential.

How to control sp_analyze ↓

What sp_analyze does on Stitch Pro

AI agents call sp_analyze to retrieve information from Stitch Pro without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Low Risk

Why sp_analyze needs a policy

sp_analyze inspects HTML input to identify issues and suggest next steps, with no side effects. It queries/examines data (accessibility, responsiveness, conversion opportunities) and returns findings/recommendations. This is a standard diagnostic/advisory tool with no capability to execute code, modify data, delete resources, or trigger external operations.

From the tool's definition Tool description states it "Analyze[s] HTML and recommend[s]" — purely analytical/detection operations with no modification, deletion, execution, or financial impact. Keywords: 'Analyze', 'Detects', 'recommend' indicate read-only inspection.

Documented attack patterns abuse exactly the kind of access sp_analyze gives an agent:

How to control sp_analyze

PolicyLayer is an MCP gateway — it sits between your AI agents and Stitch Pro, and nothing reaches the server without passing your rules. This is the rule we recommend for sp_analyze:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "sp_analyze": {}
  }
}

sp_analyze is read-only, so it stays allowed — but everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Stitch Pro — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
CAP THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about sp_analyze

What does the sp_analyze tool do? +

Analyze HTML and recommend which stitch-pro tools to run. Detects accessibility issues, missing responsiveness, framework conversion opportunities, and component library mapping potential. It is categorised as a Read tool in the Stitch Pro MCP Server, which means it retrieves data without modifying state.

How do I enforce a policy on sp_analyze? +

Register the Stitch Pro MCP server in PolicyLayer and add a rule for sp_analyze: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Stitch Pro. Nothing to install.

What risk level is sp_analyze? +

sp_analyze is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit sp_analyze? +

Yes. Add a rate_limit block to the sp_analyze rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block sp_analyze completely? +

Set action: deny in the PolicyLayer policy for sp_analyze. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides sp_analyze? +

sp_analyze is provided by the Stitch Pro MCP server (luciferdono/stitch-pro-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Stitch Pro tool call.

Start from Stitch Pro, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

17 Stitch Pro tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.