update_vm_snapshot

What update_vm_snapshot does on CloudStack MCP Server

AI agents use update_vm_snapshot to create or update resources in CloudStack MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your CloudStack MCP Server environment.

Why update_vm_snapshot is rated Medium

This tool modifies snapshot properties (e.g., name, description, tags) rather than creating, deleting, or executing operations. Updates are typically reversible, placing it in Write category. Severity is medium because misconfiguration of snapshots could impact backup/recovery workflows, but the operation itself is not destructive or immediately critical to infrastructure availability.

From the tool's definition Tool name 'update_vm_snapshot' and description 'Update virtual machine snapshot' indicate modification of existing snapshot metadata or configuration without deletion or irreversible destruction. The verb 'update' is reversible.

The rule that runs update_vm_snapshot safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CloudStack MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_vm_snapshot, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_vm_snapshot": {
      "limits": [
        {
          "counter": "update_vm_snapshot_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_vm_snapshot