create-pro-subscription

THE RISK

Critical Risk

Creating a pro subscription commits a financial obligation (recurring payment) on behalf of the user. Redis Cloud pro subscriptions are paid tiers, so initiating one constitutes a financial commitment. This falls squarely in the Financial category, which supersedes all others. The blast radius is critical because an AI agent could spin up costly infrastructure with ongoing billing implications.

From the tool's definition Create a new pro subscription

Documented attack patterns abuse exactly the kind of access create-pro-subscription gives an agent:

HOW TO CONTROL CREATE-PRO-SUBSCRIPTION

PolicyLayer is an MCP gateway — it sits between your AI agents and Redis Cloud API MCP Server, and nothing reaches the server without passing your rules. This is the rule we recommend for create-pro-subscription:

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create-pro-subscription": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

Any call to create-pro-subscription is blocked until a human approves it. The rest of the server keeps working.

Create a free account and register Redis Cloud API MCP Server — nothing to install.
Add this policy — paste it, or build it visually.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

GATE THIS TOOL →

Free to start. No card required.

EXPLORE

More Redis Cloud API MCP Server tools

Financial create-essential-subscription Create a new essential subscription. Returns a TASK ID that can be used to track the statu Destructive delete-essential-subscription Delete an essential subscription by ID Write create-essential-database Create a new essential database inside the specified subscription ID. Returns a TASK ID th Write create-pro-database Create a new database inside the specified subscription ID. Returns a TASK ID that can be Read get-current-account Get the current Cloud Redis account Read get-current-payment-methods Get the current payment methods for the current Cloud Redis account Read get-database-modules Lookup list of database modules supported in current account (support may differ based on Read get-essential-databases Get the essential databases for the provided subscription Id

All 18 Redis Cloud API MCP Server tools →

Financial tools on other servers

Atv build_deposit_tx Bitcoin MCP Server pay_invoice AbraFlexi bank_transaction_create Hilanet MCP decrease_coworker_salary

Go deeper

Critical-risk tools in Redis Cloud API MCP Server → Every critical-risk tool this server exposes, in one view.
All critical-risk MCP tools → Every critical-risk tool across the catalogue, and the policy pattern that contains them.
The MCP Attack Database → Documented attack patterns against MCP deployments — and the policies that stop them.
How to Add Spending Controls to Any MCP Agent →
Rate Limiting MCP Tool Calls: A Practical Guide →

FAQ

What does the create-pro-subscription tool do? +

Create a new pro subscription. Returns a TASK ID that can be used to track the status of the subscription creation. It is categorised as a Financial tool in the Redis Cloud API MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on create-pro-subscription? +

Register the Redis Cloud API MCP Server MCP server in PolicyLayer and add a rule for create-pro-subscription: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Redis Cloud API MCP Server. Nothing to install.

What risk level is create-pro-subscription? +

create-pro-subscription is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit create-pro-subscription? +

Yes. Add a rate_limit block to the create-pro-subscription rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create-pro-subscription completely? +

Set action: deny in the PolicyLayer policy for create-pro-subscription. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create-pro-subscription? +

create-pro-subscription is provided by the Redis Cloud API MCP Server MCP server (redis/mcp-redis-cloud). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Redis Cloud API MCP Server tool call.

Deterministic rules across all 18 Redis Cloud API MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN REDIS CLOUD API →

Free to start. No card required.

18 Redis Cloud API MCP Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// WHAT CREATE-PRO-SUBSCRIPTION ON REDIS CLOUD API MCP SERVER DOES

// THE RISK

// HOW TO CONTROL CREATE-PRO-SUBSCRIPTION

// EXPLORE