magnyxa_logout · Magnyxa MCP: Risk & Policy

WHAT IT DOES

What magnyxa_logout does on Magnyxa

AI agents use magnyxa_logout to create or update resources in Magnyxa — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Magnyxa environment.

WHY IT NEEDS A POLICY

Why magnyxa_logout needs a policy

The tool modifies authentication state and removes credentials (reversible operations: the user can re-authenticate). It does not destroy irreversible data or financial resources. While it affects security posture, deletion of tokens is a standard, expected authentication operation. Classified as Write rather than Destructive because token deletion is a normal, reversible logout flow that the user controls.

From the tool's definition Tool description states it logs out from Magnyxa and deletes saved authentication tokens (ログアウトして保存された認証トークンを削除します). This modifies stored credentials and session state.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

magnyxa_logout Rate-limited

magnyxa_logout stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "magnyxa_logout": {
      "limits": [
        {
          "counter": "magnyxa_logout_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Magnyxa, so you can run agents against it safely.

FAQ

Questions about magnyxa_logout

What does the magnyxa_logout tool do? +

Magnyxaからログアウトして保存された認証トークンを削除します。. It is categorised as a Write tool in the Magnyxa MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on magnyxa_logout? +

Register the Magnyxa MCP server in PolicyLayer and add a rule for magnyxa_logout: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Magnyxa. Nothing to install.

What risk level is magnyxa_logout? +

magnyxa_logout is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit magnyxa_logout? +

Yes. Add a rate_limit block to the magnyxa_logout rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block magnyxa_logout completely? +

Set action: deny in the PolicyLayer policy for magnyxa_logout. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides magnyxa_logout? +

magnyxa_logout is provided by the Magnyxa MCP server (@zelklab/magnyxa-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.