Low Risk

sp_extract

Parse HTML into reusable components and map them to shadcn/radix/MUI equivalents with confidence scoring

How to control sp_extract ↓

What sp_extract does on Stitch Pro

AI agents call sp_extract to retrieve information from Stitch Pro without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Low Risk

Why sp_extract needs a policy

This tool performs static analysis on HTML input to extract and categorize components. It reads HTML structures, analyzes them, and produces categorized output (mappings with confidence scores). There are no side effects, no data modification, no code execution, and no destructive operations. This is clearly a Read operation: information retrieval and analysis.

From the tool's definition The tool parses HTML and maps components to equivalents with confidence scoring. Key verbs: 'Parse' and 'map' indicate analysis and classification of existing data without modification, creation of new data structures, or execution of external operations.

Documented attack patterns abuse exactly the kind of access sp_extract gives an agent:

How to control sp_extract

PolicyLayer is an MCP gateway — it sits between your AI agents and Stitch Pro, and nothing reaches the server without passing your rules. This is the rule we recommend for sp_extract:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "sp_extract": {}
  }
}

sp_extract is read-only, so it stays allowed — but everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Stitch Pro — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
CAP THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about sp_extract

What does the sp_extract tool do? +

Parse HTML into reusable components and map them to shadcn/radix/MUI equivalents with confidence scoring. It is categorised as a Read tool in the Stitch Pro MCP Server, which means it retrieves data without modifying state.

How do I enforce a policy on sp_extract? +

Register the Stitch Pro MCP server in PolicyLayer and add a rule for sp_extract: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Stitch Pro. Nothing to install.

What risk level is sp_extract? +

sp_extract is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit sp_extract? +

Yes. Add a rate_limit block to the sp_extract rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block sp_extract completely? +

Set action: deny in the PolicyLayer policy for sp_extract. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides sp_extract? +

sp_extract is provided by the Stitch Pro MCP server (luciferdono/stitch-pro-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Stitch Pro tool call.

Start from Stitch Pro, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

17 Stitch Pro tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.