wire_pins_to_net · Kicad MCP: Risk & Policy

WHAT IT DOES

What wire_pins_to_net does on Kicad

AI agents use wire_pins_to_net to create or update resources in Kicad — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Kicad environment.

WHY IT NEEDS A POLICY

Why wire_pins_to_net needs a policy

This tool creates or modifies electrical connections between pins and nets within a KiCad project. This is a write operation because it alters the schematic/PCB design reversibly (connections can be removed or changed). It does not execute arbitrary code or delete data irreversibly.

From the tool's definition Tool name 'wire_pins_to_net' indicates modification of electrical connections in a schematic or PCB. Sibling tools like 'add_copper_zone', 'add_pcb_line', 'add_label', and 'add_hierarchical_label' all perform write operations that create or modify circuit…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

wire_pins_to_net Rate-limited

wire_pins_to_net stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wire_pins_to_net": {
      "limits": [
        {
          "counter": "wire_pins_to_net_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Kicad, so you can run agents against it safely.

FAQ

Questions about wire_pins_to_net

What does the wire_pins_to_net tool do? +

wire_pins_to_net. It is categorised as a Write tool in the Kicad MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on wire_pins_to_net? +

Register the Kicad MCP server in PolicyLayer and add a rule for wire_pins_to_net: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Kicad. Nothing to install.

What risk level is wire_pins_to_net? +

wire_pins_to_net is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit wire_pins_to_net? +

Yes. Add a rate_limit block to the wire_pins_to_net rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block wire_pins_to_net completely? +

Set action: deny in the PolicyLayer policy for wire_pins_to_net. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides wire_pins_to_net? +

wire_pins_to_net is provided by the Kicad MCP server (productofamerica/mcp-server-kicad). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.