trace_add_link · Musubix MCP: Risk & Policy

WHAT IT DOES

What trace_add_link does on Musubix

AI agents use trace_add_link to create or update resources in Musubix — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Musubix environment.

WHY IT NEEDS A POLICY

Why trace_add_link needs a policy

The tool creates or modifies traceability relationships between artifacts. This is a write operation (reversible data creation), not a read (it modifies state), execute (no command execution), destructive (links can typically be removed), or financial operation.

From the tool's definition Tool description states it 'Add[s] a traceability link between two artifacts' — this creates new metadata connections between existing items without deleting or overwriting them.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

trace_add_link Rate-limited

trace_add_link stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "trace_add_link": {
      "limits": [
        {
          "counter": "trace_add_link_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Musubix, so you can run agents against it safely.

FAQ

Questions about trace_add_link

What does the trace_add_link tool do? +

Add a traceability link between two artifacts (requirements, designs, code, tests). It is categorised as a Write tool in the Musubix MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on trace_add_link? +

Register the Musubix MCP server in PolicyLayer and add a rule for trace_add_link: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Musubix. Nothing to install.

What risk level is trace_add_link? +

trace_add_link is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit trace_add_link? +

Yes. Add a rate_limit block to the trace_add_link rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block trace_add_link completely? +

Set action: deny in the PolicyLayer policy for trace_add_link. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides trace_add_link? +

trace_add_link is provided by the Musubix MCP server (@nahisaho/musubix-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.