create_global_load_balancer

What create_global_load_balancer does on CloudStack MCP Server

AI agents use create_global_load_balancer to create or update resources in CloudStack MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your CloudStack MCP Server environment.

Why create_global_load_balancer is rated Medium

This tool creates (writes) a new global load balancer rule, modifying infrastructure configuration. While the operation is reversible (the rule can be deleted), it affects critical load balancing infrastructure that routes production traffic. The severity is high due to the potential blast radius—misconfiguration could redirect traffic, cause service disruption, or expose unintended backend systems.

From the tool's definition Tool name is 'create_global_load_balancer' and description states 'Create global load balancer rule'. The verb 'create' indicates a reversible write operation that establishes new infrastructure configuration.

The rule that runs create_global_load_balancer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CloudStack MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_global_load_balancer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_global_load_balancer": {
      "limits": [
        {
          "counter": "create_global_load_balancer_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_global_load_balancer