create_vpc_offering

What create_vpc_offering does on CloudStack MCP Server

AI agents use create_vpc_offering to create or update resources in CloudStack MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your CloudStack MCP Server environment.

Why create_vpc_offering is rated Medium

This tool creates a new VPC offering, which is a reversible write operation that defines network resource parameters. While it configures infrastructure, it does not execute arbitrary code, delete data, or move money. However, severity is 'high' because misuse could create widespread network connectivity issues or unintended resource offerings affecting multiple tenants or workloads.

From the tool's definition Tool name 'create_vpc_offering' and description 'Create a new VPC offering' indicate a data creation operation that modifies infrastructure configuration. VPC offerings are network resource definitions that affect infrastructure topology and connectivity.

The rule that runs create_vpc_offering safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CloudStack MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_vpc_offering, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_vpc_offering": {
      "limits": [
        {
          "counter": "create_vpc_offering_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_vpc_offering