Medium Risk

createFromTestPlan

create test cases from a test plan for a given test target. Provide freeform text, related images and tag names to assign

How to control createFromTestPlan ↓

What createFromTestPlan does on Octomind

AI agents use createFromTestPlan to create or update resources in Octomind — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Octomind environment.

Medium Risk

Why createFromTestPlan needs a policy

This tool creates new test cases within the Octomind testing platform based on a test plan. Creation of test cases is a Write operation—it adds data to the system reversibly. The severity is medium because misuse could create large numbers of invalid or malicious test cases that clutter the system and consume resources, but the impact is containable through deletion.

From the tool's definition Tool name 'createFromTestPlan' and description 'create test cases' indicate data creation. The action is reversible (test cases can be deleted, as evidenced by sibling tool 'deleteTestTarget'), making this Write rather than Destructive.

Documented attack patterns abuse exactly the kind of access createFromTestPlan gives an agent:

How to control createFromTestPlan

PolicyLayer is an MCP gateway — it sits between your AI agents and Octomind, and nothing reaches the server without passing your rules. This is the rule we recommend for createFromTestPlan:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "createFromTestPlan": {
      "limits": [
        {
          "counter": "createfromtestplan_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

createFromTestPlan stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Octomind — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about createFromTestPlan

What does the createFromTestPlan tool do? +

create test cases from a test plan for a given test target. Provide freeform text, related images and tag names to assign. It is categorised as a Write tool in the Octomind MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on createFromTestPlan? +

Register the Octomind MCP server in PolicyLayer and add a rule for createFromTestPlan: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Octomind. Nothing to install.

What risk level is createFromTestPlan? +

createFromTestPlan is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit createFromTestPlan? +

Yes. Add a rate_limit block to the createFromTestPlan rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block createFromTestPlan completely? +

Set action: deny in the PolicyLayer policy for createFromTestPlan. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides createFromTestPlan? +

createFromTestPlan is provided by the Octomind MCP server (octomind-dev/octomind-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Octomind tool call.

Start from Octomind, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

21 Octomind tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.