moltrust_credential · MolTrust MCP Server MCP: Risk & Policy

WHAT IT DOES

What moltrust_credential does on MolTrust MCP Server

AI agents call moltrust_credential as a supporting operation in MolTrust MCP Server workflows.

WHY IT NEEDS A POLICY

Why moltrust_credential needs a policy

With no description available, the exact action (read, write, issue, verify) cannot be determined. Sibling tools suggest this server handles credential issuance and verification. Similar tools like 'moltguard_credential_issue' are Write and 'moltguard_credential_verify' are Read, but without knowing what moltrust_credential does specifically, confidence is low.

From the tool's definition Tool description is empty and uninformative. Tool name 'moltrust_credential' suggests interaction with verifiable credentials based on server context.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

moltrust_credential Rate-limited

moltrust_credential gets a rate cap, and everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "moltrust_credential": {
      "limits": [
        {
          "counter": "moltrust_credential_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}

SET A RULE FOR THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches MolTrust MCP Server, so you can run agents against it safely.

FAQ

Questions about moltrust_credential

What does the moltrust_credential tool do? +

moltrust_credential. It is categorised as a Other tool in the MolTrust MCP Server MCP Server, which means it performs auxiliary operations.

How do I enforce a policy on moltrust_credential? +

Register the MolTrust MCP Server MCP server in PolicyLayer and add a rule for moltrust_credential: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MolTrust MCP Server. Nothing to install.

What risk level is moltrust_credential? +

moltrust_credential is a Other tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit moltrust_credential? +

Yes. Add a rate_limit block to the moltrust_credential rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block moltrust_credential completely? +

Set action: deny in the PolicyLayer policy for moltrust_credential. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides moltrust_credential? +

moltrust_credential is provided by the MolTrust MCP Server MCP server (pypi:moltrust-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.