Update commit status with rich metadata
AI agents use fork_parity_update_commit_status to create or update resources in Fork Parity MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Fork Parity MCP environment.
The tool updates (modifies) existing commit status records with metadata. This is a reversible write operation—metadata can be corrected or reverted without data loss. It does not delete records, execute arbitrary code, move funds, or trigger external side effects beyond the metadata update itself.
From the tool's definition The tool name explicitly states 'update' and the description indicates it modifies commit status by adding or changing 'rich metadata'. This is a write operation that creates or modifies data reversibly.
Attacks that exploit this kind of access
Update commit status with rich metadata. It is categorised as a Write tool in the Fork Parity MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Fork Parity MCP server in PolicyLayer and add a rule for fork_parity_update_commit_status: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Fork Parity MCP. Nothing to install.
fork_parity_update_commit_status is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the fork_parity_update_commit_status rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for fork_parity_update_commit_status. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
fork_parity_update_commit_status is provided by the Fork Parity MCP server (moikas-code/fork-parity-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →