update_admin_group

What update_admin_group does on Mealie MCP Server

AI agents use update_admin_group to create or update resources in Mealie MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mealie MCP Server environment.

Why update_admin_group is rated Medium

This tool updates administrative group settings, which is a Write operation (reversible modification of data). Severity is high because unauthorized group updates could alter permissions, access controls, and administrative boundaries affecting multiple users. However, it is not Destructive (not deletion), Financial, or Execute (not arbitrary code/command), so Write is the correct category.

From the tool's definition Tool name is 'update_admin_group' and description states 'Update one admin-visible group by ID' — this modifies group configuration/data reversibly via an update operation.

Risk signalsAdmin/system-level operation

The rule that runs update_admin_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mealie MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_admin_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_admin_group": {
      "limits": [
        {
          "counter": "update_admin_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_admin_group