kicad.fill_zones · Eda MCP: Risk & Policy

WHAT IT DOES

What kicad.fill_zones does on Eda

AI agents invoke kicad.fill_zones to trigger actions in Eda. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why kicad.fill_zones needs a policy

This tool triggers a PCB layout operation (zone filling) that modifies the board state by computing and filling copper pour zones. It is an external operation with side effects on the design file, but it is reversible (zones can be unfilled or refilled), placing it in Execute rather than Write or Destructive. Misuse has medium blast radius as it could corrupt zone fills or affect downstream manufacturing outputs.

From the tool's definition Fill all zones. Must be done before DRC or Gerber export.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

kicad.fill_zones Rate-limited

kicad.fill_zones stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "kicad.fill_zones": {
      "limits": [
        {
          "counter": "kicad.fill_zones_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Eda, so you can run agents against it safely.

FAQ

Questions about kicad.fill_zones

What does the kicad.fill_zones tool do? +

[Requires open project] Fill all zones. Must be done before DRC or Gerber export. It is categorised as a Execute tool in the Eda MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on kicad.fill_zones? +

Register the Eda MCP server in PolicyLayer and add a rule for kicad.fill_zones: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Eda. Nothing to install.

What risk level is kicad.fill_zones? +

kicad.fill_zones is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit kicad.fill_zones? +

Yes. Add a rate_limit block to the kicad.fill_zones rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block kicad.fill_zones completely? +

Set action: deny in the PolicyLayer policy for kicad.fill_zones. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides kicad.fill_zones? +

kicad.fill_zones is provided by the Eda MCP server (saeronlab/eda-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.