create_record_type · Prowpt MCP Server MCP: Risk & Policy

WHAT IT DOES

What create_record_type does on Prowpt MCP Server

AI agents use create_record_type to create or update resources in Prowpt MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Prowpt MCP Server environment.

WHY IT NEEDS A POLICY

Why create_record_type needs a policy

This tool creates new record types and field definitions within the Prowpt platform. It is a Write operation because it creates data structures that can be subsequently modified or deleted. The severity is medium because misconfigured record types could impact application structure and data organization, but the action is reversible (record types can be deleted or updated).

From the tool's definition Tool description states 'Create a new record type with field definitions' — the verb 'Create' and action of adding new data structures indicate a write operation that modifies the system state reversibly.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

create_record_type Rate-limited

create_record_type stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_record_type": {
      "limits": [
        {
          "counter": "create_record_type_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Prowpt MCP Server, so you can run agents against it safely.

FAQ

Questions about create_record_type

What does the create_record_type tool do? +

Create a new record type with field definitions. Each field needs {name, type}; label is auto-generated from name if omitted. select/multiselect options: use a plain string array (e.g. [\. It is categorised as a Write tool in the Prowpt MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on create_record_type? +

Register the Prowpt MCP Server MCP server in PolicyLayer and add a rule for create_record_type: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Prowpt MCP Server. Nothing to install.

What risk level is create_record_type? +

create_record_type is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit create_record_type? +

Yes. Add a rate_limit block to the create_record_type rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create_record_type completely? +

Set action: deny in the PolicyLayer policy for create_record_type. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create_record_type? +

create_record_type is provided by the Prowpt MCP Server MCP server (prowptai/prowpt-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.