api_sentence

What api_sentence does on Mcp Control Plane

AI agents invoke api_sentence to trigger actions in Mcp Control Plane. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why api_sentence is rated High

This tool executes raw API sentences against RouterOS (MikroTik network equipment), which can trigger system operations with effects dependent on the API sentence provided. While the example shown is read-only, the ability to run 'raw' API sentences means an AI agent could execute commands that reconfigure network settings, modify firewall rules, reboot devices, or make other state-changing operations.

From the tool's definition Tool description states 'Run a raw RouterOS API sentence' - the verb 'Run' combined with 'raw API' indicates execution of arbitrary commands against a MikroTik RouterOS system. The example '['/system/resource/print']' shows system-level API calls.

The rule that runs api_sentence safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Control Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For api_sentence, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "api_sentence": {
      "limits": [
        {
          "counter": "api_sentence_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about api_sentence