gcloud_set_traffic · Gcloud MCP: Risk & Policy

WHAT IT DOES

What gcloud_set_traffic does on Gcloud

AI agents invoke gcloud_set_traffic to trigger actions in Gcloud. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why gcloud_set_traffic needs a policy

This tool modifies live production traffic routing between Cloud Run revisions, which is an operational action with immediate real-world impact. It triggers an external operation (traffic split configuration) whose effects depend on arguments supplied.

From the tool's definition "Set traffic splitting between Cloud Run revisions" and "WARNING: This modifies live traffic — use with care."

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

gcloud_set_traffic Rate-limited

gcloud_set_traffic stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gcloud_set_traffic": {
      "limits": [
        {
          "counter": "gcloud_set_traffic_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Gcloud, so you can run agents against it safely.

FAQ

Questions about gcloud_set_traffic

What does the gcloud_set_traffic tool do? +

Set traffic splitting between Cloud Run revisions. Useful for canary deployments and rollbacks. WARNING: This modifies live traffic — use with care. It is categorised as a Execute tool in the Gcloud MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on gcloud_set_traffic? +

Register the Gcloud MCP server in PolicyLayer and add a rule for gcloud_set_traffic: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Gcloud. Nothing to install.

What risk level is gcloud_set_traffic? +

gcloud_set_traffic is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit gcloud_set_traffic? +

Yes. Add a rate_limit block to the gcloud_set_traffic rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block gcloud_set_traffic completely? +

Set action: deny in the PolicyLayer policy for gcloud_set_traffic. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides gcloud_set_traffic? +

gcloud_set_traffic is provided by the Gcloud MCP server (prmichaelsen/gcloud-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.