create_network_offering

What create_network_offering does on CloudStack MCP Server

AI agents use create_network_offering to create or update resources in CloudStack MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your CloudStack MCP Server environment.

Why create_network_offering is rated Medium

This tool creates a new network offering, which is a reversible configuration change in CloudStack infrastructure. It does not execute code, delete data, or move money. While creating network offerings could have significant downstream impact on infrastructure (justifying 'high' severity due to potential blast radius if misconfigured by an AI agent), the operation itself is reversible—the offering can be deleted or…

From the tool's definition Tool name 'create_network_offering' and description 'Create a new network offering' indicate creation of a new infrastructure configuration object. The verb 'create' is explicitly descriptive of a Write operation.

The rule that runs create_network_offering safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CloudStack MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_network_offering, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_network_offering": {
      "limits": [
        {
          "counter": "create_network_offering_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_network_offering