import_federated · Tages MCP: Risk & Policy

WHAT IT DOES

What import_federated does on Tages

AI agents use import_federated to create or update resources in Tages — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Tages environment.

WHY IT NEEDS A POLICY

Why import_federated needs a policy

This tool writes new memory data into the project's SQLite storage by importing from an external source. It is reversible (memories can be removed or re-imported), and does not delete existing data or execute arbitrary code, making it a Write action rather than Execute or Destructive.

From the tool's definition Tool name 'import_federated' and description 'Import a federated memory from the shared library into this project' indicates creation/addition of data (memory records) into the local project store.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

import_federated Rate-limited

import_federated stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "import_federated": {
      "limits": [
        {
          "counter": "import_federated_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Tages, so you can run agents against it safely.

FAQ

Questions about import_federated

What does the import_federated tool do? +

Import a federated memory from the shared library into this project. It is categorised as a Write tool in the Tages MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on import_federated? +

Register the Tages MCP server in PolicyLayer and add a rule for import_federated: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Tages. Nothing to install.

What risk level is import_federated? +

import_federated is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit import_federated? +

Yes. Add a rate_limit block to the import_federated rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block import_federated completely? +

Set action: deny in the PolicyLayer policy for import_federated. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides import_federated? +

import_federated is provided by the Tages MCP server (ryantlee25-droid/tages). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.