create_credential

What create_credential does on Cobalt Strike MCP Server

AI agents use create_credential to create or update resources in Cobalt Strike MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Cobalt Strike MCP Server environment.

Why create_credential is rated Medium

While the base action (creating a credential entry) is a Write operation, the context elevates severity to critical. In a Cobalt Strike environment, creating credentials could enable: persistence mechanisms, lateral movement, privilege escalation, or unauthorized access. The tool's purpose within offensive security operations and its potential for enabling secondary attacks justifies critical severity.

From the tool's definition Tool is part of Cobalt Strike red team operations server with 'credential operations' capabilities. The tool description 'Create a new credential entry' indicates it creates/modifies credential data.

The rule that runs create_credential safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cobalt Strike MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_credential, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_credential": {
      "limits": [
        {
          "counter": "create_credential_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_credential