lidarr_add_artist · Homelab MCP: Risk & Policy

WHAT IT DOES

What lidarr_add_artist does on Homelab

AI agents use lidarr_add_artist to create or update resources in Homelab — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Homelab environment.

WHY IT NEEDS A POLICY

Why lidarr_add_artist needs a policy

This tool creates a new artist entry in Lidarr (a write operation) and triggers an automated search/download process. While it initiates a download, the primary action is adding/creating data in the media management system. It is reversible (the artist can be removed). The automated download search is a side effect but doesn't elevate this to Execute or Destructive.

From the tool's definition Add a music artist to Lidarr and trigger an automatic album download search

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

lidarr_add_artist Rate-limited

lidarr_add_artist stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "lidarr_add_artist": {
      "limits": [
        {
          "counter": "lidarr_add_artist_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Homelab, so you can run agents against it safely.

FAQ

Questions about lidarr_add_artist

What does the lidarr_add_artist tool do? +

Add a music artist to Lidarr and trigger an automatic album download search. It is categorised as a Write tool in the Homelab MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on lidarr_add_artist? +

Register the Homelab MCP server in PolicyLayer and add a rule for lidarr_add_artist: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Homelab. Nothing to install.

What risk level is lidarr_add_artist? +

lidarr_add_artist is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit lidarr_add_artist? +

Yes. Add a rate_limit block to the lidarr_add_artist rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block lidarr_add_artist completely? +

Set action: deny in the PolicyLayer policy for lidarr_add_artist. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides lidarr_add_artist? +

lidarr_add_artist is provided by the Homelab MCP server (nainounen/homelab-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.