Manage medications. list shows active meds (optionally by person), refills_due shows what needs refilling within N days, add creates a med, discontinue marks one inactive.
AI agents use medications to create or update resources in Personal Brain — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Personal Brain environment.
This tool modifies health-critical data (medication records) that directly affects medical decision-making and patient safety. While the modifications are technically reversible (add/discontinue), misuse could lead to dangerous health outcomes if an AI agent incorrectly adds medications, marks critical medications as discontinued, or creates confusion in medical records.
From the tool's definition Tool description explicitly states capabilities to 'add creates a med' and 'discontinue marks one inactive', which are reversible modifications to medication records.
Attacks that exploit this kind of access
Manage medications. list shows active meds (optionally by person), refills_due shows what needs refilling within N days, add creates a med, discontinue marks one inactive. It is categorised as a Write tool in the Personal Brain MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Personal Brain MCP server in PolicyLayer and add a rule for medications: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Personal Brain. Nothing to install.
medications is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the medications rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for medications. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
medications is provided by the Personal Brain MCP server (phantomts/personal-brain-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →