# mittwald_container_stop Stop a running container. Agent View of the PolicyLayer registry record for `mittwald_container_stop`. HTML page: https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-stop ## Facts - Tool: `mittwald_container_stop` - Server: Mittwald MCP Server (`mittwald/mcp-server`) — https://policylayer.com/tools/mittwald-mcp-server.md - Homepage: https://github.com/mittwald/mcp-server - Risk category: Execute (High risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "mittwald_container_stop", "arguments": {} } } ``` ## Why mittwald_container_stop is rated High Stopping a container is an Execute action—it runs an external operation with effects that depend on the provided arguments (container ID/name). While not immediately destructive (the container can be restarted), it causes service disruption and fits the Execute category. The high severity reflects that an AI agent could maliciously stop production containers, causing availability loss. From the tool's own definition: "Tool name is 'mittwald_container_stop' and description states it will 'Stop a running container.' This triggers an external operation (stopping a container) whose effects depend on which container is specified as an argument." ## Use case AI agents invoke mittwald_container_stop to trigger actions in Mittwald MCP Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Mittwald MCP Server: ```json { "version": "1", "default": "deny", "tools": { "mittwald_container_stop": { "limits": [ { "counter": "mittwald_container_stop_rate", "window": "minute", "max": 10, "scope": "grant" } ] } } } ``` ## Other tools on Mittwald MCP Server (171) - `mittwald_app_uninstall` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-app-uninstall.md - `mittwald_backup_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-backup-delete.md - `mittwald_backup_schedule_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-backup-schedule-delete.md - `mittwald_container_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-delete.md - `mittwald_context_reset_session` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-context-reset-session.md - `mittwald_cronjob_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-cronjob-delete.md - `mittwald_database_mysql_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-database-mysql-delete.md - `mittwald_database_mysql_user_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-database-mysql-user-delete.md - `mittwald_domain_virtualhost_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-domain-virtualhost-delete.md - `mittwald_extension_uninstall` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-extension-uninstall.md - `mittwald_mail_address_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-mail-address-delete.md - `mittwald_mail_deliverybox_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-mail-deliverybox-delete.md - `mittwald_org_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-org-delete.md - `mittwald_org_membership_revoke` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-org-membership-revoke.md - `mittwald_project_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-project-delete.md - `mittwald_registry_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-registry-delete.md - `mittwald_sftp_user_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-sftp-user-delete.md - `mittwald_ssh_user_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-ssh-user-delete.md - `mittwald_stack_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-stack-delete.md - `mittwald_user_api_token_revoke` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-user-api-token-revoke.md - `mittwald_user_ssh_key_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-user-ssh-key-delete.md - `mittwald_volume_delete` — Destructive — https://policylayer.com/tools/mittwald-mcp-server/mittwald-volume-delete.md - `mittwald_app_install_wordpress` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-app-install-wordpress.md - `mittwald_app_open` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-app-open.md - `mittwald_app_ssh` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-app-ssh.md - `mittwald_app_upgrade` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-app-upgrade.md - `mittwald_container_recreate` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-recreate.md - `mittwald_container_restart` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-restart.md - `mittwald_container_run` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-run.md - `mittwald_container_start` — Execute — https://policylayer.com/tools/mittwald-mcp-server/mittwald-container-start.md - …and 141 more: https://policylayer.com/tools/mittwald-mcp-server.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=mittwald-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/mittwald-mcp-server