compact · Project Graph MCP: Risk & Policy

WHAT IT DOES

What compact does on Project Graph

AI agents use compact to create or update resources in Project Graph — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Project Graph environment.

WHY IT NEEDS A POLICY

Why compact needs a policy

The tool performs reversible modifications to code (edit, compact, beautify operations). While 'compact' and 'beautify' are non-destructive transformations, the inclusion of 'edit' as an explicit action confirms write capability. The blast radius is high because an agent with unrestricted access could modify arbitrary source files in a codebase, potentially injecting malicious code or breaking functionality.

From the tool's definition Tool description explicitly lists 'edit' and 'compact_file' among its actions, indicating the ability to modify code files. The server description emphasizes 'code reading and editing' capabilities.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

compact Rate-limited

compact stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "compact": {
      "limits": [
        {
          "counter": "compact_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Project Graph, so you can run agents against it safely.

FAQ

Questions about compact

What does the compact tool do? +

How do I enforce a policy on compact? +

Register the Project Graph MCP server in PolicyLayer and add a rule for compact: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Project Graph. Nothing to install.

What risk level is compact? +

compact is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit compact? +

Yes. Add a rate_limit block to the compact rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block compact completely? +

Set action: deny in the PolicyLayer policy for compact. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides compact? +

compact is provided by the Project Graph MCP server (rnd-pro/project-graph-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.