Create a new database server VM on a Nutanix cluster, without the database with intelligent parameter validation and guided configuration. This tool provisions a VM with the specified configurations, including compute, network, and software profiles. It can then be used to host one or more databa...
AI agents invoke create_dbserver to trigger actions in NDB MCP Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.
This tool provisions a new VM (virtual machine) on a Nutanix cluster, which is an external infrastructure operation with significant side effects. It triggers resource allocation (compute, network, software) in a cloud/virtualization environment. While it creates rather than destroys, it is more than a simple Write — it executes an infrastructure provisioning workflow with dependencies and external system effects.
From the tool's definition Create a new database server VM on a Nutanix cluster...provisions a VM with the specified configurations, including compute, network, and software profiles
Attacks that exploit this kind of access
Create a new database server VM on a Nutanix cluster, without the database with intelligent parameter validation and guided configuration. This tool provisions a VM with the specified configurations, including compute, network, and software profiles. It can then be used to host one or more databases, as a provisioning or clone target Key Features: - Automatic parameter validation and suggestions for missing required fields (suggest default values where applicable) - Support for both standalone and clustered deployments (for supported engines, e.g. Oracle RAC, and SQL Server Always On or FCI. It is not possible to deploy PostgreSQL clusters with this tool, use provision_database instead) Hints - Provide only essential parameters like name, software profile or time machine - other parameters will be suggested - Either a Software Profile or a Time Machine should be provided to create the DB VM. - Only create_dbserver tool allows to create a DB VM from a Time Machine. It is categorised as a Execute tool in the NDB MCP Server MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
Register the NDB MCP Server MCP server in PolicyLayer and add a rule for create_dbserver: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches NDB MCP Server. Nothing to install.
create_dbserver is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the create_dbserver rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for create_dbserver. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
create_dbserver is provided by the NDB MCP Server MCP server (rouxton/ndb-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →