navigate_to_pim · MCP Login Server MCP: Risk & Policy

WHAT IT DOES

What navigate_to_pim does on MCP Login Server

AI agents invoke navigate_to_pim to trigger actions in MCP Login Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why navigate_to_pim needs a policy

This tool executes a navigation action in a browser, which is an external operation that modifies browser state and may trigger page loads or application logic. While navigation alone is not inherently destructive, it falls under Execute category as it performs an action on an external system (the browser/web application) whose consequences depend on what the user does next.

From the tool's definition Tool description states it 'navigates to the PIM page using the left-hand navigation menu', indicating it performs browser navigation actions.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

navigate_to_pim Rate-limited

navigate_to_pim stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "navigate_to_pim": {
      "limits": [
        {
          "counter": "navigate_to_pim_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches MCP Login Server, so you can run agents against it safely.

FAQ

Questions about navigate_to_pim

What does the navigate_to_pim tool do? +

Navigates to the PIM (Personal Information Management) page using the left-hand navigation menu. Assumes user is already logged in. It is categorised as a Execute tool in the MCP Login Server MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on navigate_to_pim? +

Register the MCP Login Server MCP server in PolicyLayer and add a rule for navigate_to_pim: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MCP Login Server. Nothing to install.

What risk level is navigate_to_pim? +

navigate_to_pim is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit navigate_to_pim? +

Yes. Add a rate_limit block to the navigate_to_pim rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block navigate_to_pim completely? +

Set action: deny in the PolicyLayer policy for navigate_to_pim. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides navigate_to_pim? +

navigate_to_pim is provided by the MCP Login Server MCP server (nieperdragon/custom_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.