create_user_with_ssl

What create_user_with_ssl does on Mcp Windows

AI agents use create_user_with_ssl to create or update resources in Mcp Windows, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcp Windows environment.

Why create_user_with_ssl is rated Medium

This tool creates new user accounts on Windows systems, which modifies system security posture and access control lists. While reversible (unlike Destructive), it is Write-category because it creates new identity/access objects. Severity is high because compromised creation of privileged user accounts or accounts with excessive permissions could grant unauthorized system access.

From the tool's definition Tool name explicitly states 'create_user' which is a user account creation operation. Description confirms it 'Create a user with SSL requirements.' User creation is a reversible data modification operation (users can be deleted/disabled), and represents…

The rule that runs create_user_with_ssl safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Windows, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_user_with_ssl, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_user_with_ssl": {
      "limits": [
        {
          "counter": "create_user_with_ssl_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_user_with_ssl