sanity_bulk · Sanity MCP Server MCP: Risk & Policy

WHAT IT DOES

What sanity_bulk does on Sanity MCP Server

AI agents invoke sanity_bulk to trigger actions in Sanity MCP Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why sanity_bulk needs a policy

sanity_bulk executes arbitrary multiple operations whose effects are determined by caller-supplied arguments. While each individual operation might be categorized as Write, Create, or Delete, the bulk execution capability to perform multiple operations atomically with side effects that extend beyond simple data modification (it controls transaction semantics) elevates this to Execute.

From the tool's definition "Execute multiple operations in a single atomic transaction. All succeed or all fail together." The tool executes multiple operations programmatically; the outcomes depend entirely on which operations are specified as arguments, making this Execute rather…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

sanity_bulk Rate-limited

sanity_bulk stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "sanity_bulk": {
      "limits": [
        {
          "counter": "sanity_bulk_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Sanity MCP Server, so you can run agents against it safely.

FAQ

Questions about sanity_bulk

What does the sanity_bulk tool do? +

Execute multiple operations in a single atomic transaction. All succeed or all fail together. It is categorised as a Execute tool in the Sanity MCP Server MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on sanity_bulk? +

Register the Sanity MCP Server MCP server in PolicyLayer and add a rule for sanity_bulk: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Sanity MCP Server. Nothing to install.

What risk level is sanity_bulk? +

sanity_bulk is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit sanity_bulk? +

Yes. Add a rate_limit block to the sanity_bulk rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block sanity_bulk completely? +

Set action: deny in the PolicyLayer policy for sanity_bulk. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides sanity_bulk? +

sanity_bulk is provided by the Sanity MCP Server MCP server (purple-horizons/sanity-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.