Crawl a URL and return all internal links found on the page. Returns structured JSON with data.internal_urls array. Useful for discovering pages before batch-fetching them.\n\nWHEN TO USE: Before a batch scraping job — call novada_proxy_map first to discover URLs, then novada_proxy_batch_fetch to...
AI agents call novada_proxy_map to retrieve information from Novada Proxy without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
While the tool itself performs read-only retrieval of link data, the severity is elevated to 'high' because it operates in the context of a proxy service explicitly designed to 'bypass anti-bot systems and geo-targeting' and 'route HTTP requests through millions of real residential IPs.' This infrastructure enables potential misuse for unauthorized scraping, privacy violations, and circumventing website terms of…
From the tool's definition Tool description states it will 'Crawl a URL and return all internal links found on the page' and 'Returns structured JSON with data.internal_urls array.' This is a retrieval/query operation with no modification or deletion of data.
Attacks that exploit this kind of access
Crawl a URL and return all internal links found on the page. Returns structured JSON with data.internal_urls array. Useful for discovering pages before batch-fetching them.\n\nWHEN TO USE: Before a batch scraping job — call novada_proxy_map first to discover URLs, then novada_proxy_batch_fetch to scrape them.\nUSE novada_proxy_fetch INSTEAD IF: You only need the content of a single specific URL.\nNOTE: This is a shallow map (single page). For deep crawls, call novada_proxy_map iteratively on discovered URLs.\nON FAILURE: If too few links found, the page may use JavaScript to load navigation — retry the URL with novada_proxy_render first, then extract links from rendered content. It is categorised as a Read tool in the Novada Proxy MCP Server, which means it retrieves data without modifying state.
Register the Novada Proxy MCP server in PolicyLayer and add a rule for novada_proxy_map: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Novada Proxy. Nothing to install.
novada_proxy_map is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the novada_proxy_map rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for novada_proxy_map. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
novada_proxy_map is provided by the Novada Proxy MCP server (novadalabs/novada-proxy). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
novada_proxy_map is one line of Novada Proxy's registry record.
The record carries the whole server: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.
Teams ship this data inside their own products. See what a licence covers →