Trigger a Bambu AMS RFID re-read for one AMS slot. This can move AMS filament; use only when the printer is idle and unloaded.
AI agents invoke reread_ams_rfid to trigger actions in Bambu Printer. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.
This tool executes a command that causes a physical device (the AMS—Automated Material System) to perform an action (RFID re-read and potential filament movement). While not destructive or financial, it triggers external hardware operations whose effects depend on printer state and the specific AMS slot targeted.
From the tool's definition Tool description states "Trigger a Bambu AMS RFID re-read" and "can move AMS filament." The word "Trigger" indicates initiating an external physical operation on printer hardware. Moving AMS filament is a mechanical action with real-world effects.
Attacks that exploit this kind of access
Trigger a Bambu AMS RFID re-read for one AMS slot. This can move AMS filament; use only when the printer is idle and unloaded. It is categorised as a Execute tool in the Bambu Printer MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
Register the Bambu Printer MCP server in PolicyLayer and add a rule for reread_ams_rfid: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Bambu Printer. Nothing to install.
reread_ams_rfid is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the reread_ams_rfid rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for reread_ams_rfid. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
reread_ams_rfid is provided by the Bambu Printer MCP server (rowbotik/bambu-printer-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →