bp_create_reading · Blood Pressure Tool MCP: Risk & Policy

WHAT IT DOES

What bp_create_reading does on Blood Pressure Tool

AI agents use bp_create_reading to create or update resources in Blood Pressure Tool — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Blood Pressure Tool environment.

WHY IT NEEDS A POLICY

Why bp_create_reading needs a policy

This tool creates new blood pressure reading records, which is a reversible write operation. While not destructive (data can be modified or deleted), it introduces new health data into the system. Severity is medium because misuse could involve creating false or misleading health records, though this is generally reversible through updates or deletion.

From the tool's definition Tool name 'bp_create_reading' indicates creation of new data records. Server description explicitly lists 'create' as a capability for managing blood pressure readings.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

bp_create_reading Rate-limited

bp_create_reading stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bp_create_reading": {
      "limits": [
        {
          "counter": "bp_create_reading_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Blood Pressure Tool, so you can run agents against it safely.

FAQ

Questions about bp_create_reading

What does the bp_create_reading tool do? +

bp_create_reading. It is categorised as a Write tool in the Blood Pressure Tool MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on bp_create_reading? +

Register the Blood Pressure Tool MCP server in PolicyLayer and add a rule for bp_create_reading: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Blood Pressure Tool. Nothing to install.

What risk level is bp_create_reading? +

bp_create_reading is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit bp_create_reading? +

Yes. Add a rate_limit block to the bp_create_reading rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block bp_create_reading completely? +

Set action: deny in the PolicyLayer policy for bp_create_reading. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides bp_create_reading? +

bp_create_reading is provided by the Blood Pressure Tool MCP server (mclarkson/bptool). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.