edges_canny · farshid-mcp-imageProcessing MCP: Risk & Policy

WHAT IT DOES

What edges_canny does on farshid-mcp-imageProcessing

AI agents invoke edges_canny to trigger actions in farshid-mcp-imageProcessing. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why edges_canny needs a policy

This tool executes the Canny edge detection algorithm on an image, which is a computational operation/transform. It does not merely retrieve data (it produces a derived output), nor does it write/modify stored data, delete anything, or involve finances. It falls under Execute as it triggers an image processing operation whose output depends on the input arguments.

From the tool's definition 'Canny edge detector' — runs an image processing algorithm (edge detection) on input data

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

edges_canny Rate-limited

edges_canny stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "edges_canny": {
      "limits": [
        {
          "counter": "edges_canny_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches farshid-mcp-imageProcessing, so you can run agents against it safely.

FAQ

Questions about edges_canny

What does the edges_canny tool do? +

Canny edge detector. It is categorised as a Execute tool in the farshid-mcp-imageProcessing MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on edges_canny? +

Register the farshid-mcp-imageProcessing MCP server in PolicyLayer and add a rule for edges_canny: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches farshid-mcp-imageProcessing. Nothing to install.

What risk level is edges_canny? +

edges_canny is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit edges_canny? +

Yes. Add a rate_limit block to the edges_canny rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block edges_canny completely? +

Set action: deny in the PolicyLayer policy for edges_canny. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides edges_canny? +

edges_canny is provided by the farshid-mcp-imageProcessing MCP server (pirahansiah/farshid-mcp-imageprocessing). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.