Medium Risk

createTestTarget

the createTestTarget tool can create a new test target or project. A test target represents an application or service that can be tested using Octomind.

How to control createTestTarget ↓

What createTestTarget does on Octomind

AI agents use createTestTarget to create or update resources in Octomind — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Octomind environment.

Medium Risk

Why createTestTarget needs a policy

The tool creates new data (test targets/projects) in a reversible manner. This is a Write operation rather than Read (no querying), Execute (no external code execution), Destructive (creation is reversible), or Financial (no money involved).

From the tool's definition Tool name 'createTestTarget' combined with description stating it 'can create a new test target or project' indicates a write operation that creates new data in the Octomind testing platform.

Documented attack patterns abuse exactly the kind of access createTestTarget gives an agent:

How to control createTestTarget

PolicyLayer is an MCP gateway — it sits between your AI agents and Octomind, and nothing reaches the server without passing your rules. This is the rule we recommend for createTestTarget:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "createTestTarget": {
      "limits": [
        {
          "counter": "createtesttarget_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

createTestTarget stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Octomind — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about createTestTarget

What does the createTestTarget tool do? +

the createTestTarget tool can create a new test target or project. A test target represents an application or service that can be tested using Octomind. It is categorised as a Write tool in the Octomind MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on createTestTarget? +

Register the Octomind MCP server in PolicyLayer and add a rule for createTestTarget: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Octomind. Nothing to install.

What risk level is createTestTarget? +

createTestTarget is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit createTestTarget? +

Yes. Add a rate_limit block to the createTestTarget rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block createTestTarget completely? +

Set action: deny in the PolicyLayer policy for createTestTarget. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides createTestTarget? +

createTestTarget is provided by the Octomind MCP server (octomind-dev/octomind-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Octomind tool call.

Start from Octomind, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

21 Octomind tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.