init_project_rules · MCP Shrimp Task Manager MCP

WHAT IT DOES

What init_project_rules does on MCP Shrimp Task Manager

AI agents use init_project_rules to create or update resources in MCP Shrimp Task Manager — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your MCP Shrimp Task Manager environment.

WHY IT NEEDS A POLICY

Why init_project_rules needs a policy

This tool creates or establishes project rules and guidelines, which is a write operation that sets up configuration/policy data. It is reversible in the sense that rules can be changed or overwritten later. It doesn't execute code, delete data, or involve financial transactions. Severity is medium because misconfigured project rules could misdirect an AI agent's entire workflow for a project.

From the tool's definition Initialize project-specific rules and guidelines

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

init_project_rules Rate-limited

init_project_rules stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "init_project_rules": {
      "limits": [
        {
          "counter": "init_project_rules_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches MCP Shrimp Task Manager, so you can run agents against it safely.

FAQ

Questions about init_project_rules

What does the init_project_rules tool do? +

Initialize project-specific rules and guidelines. It is categorised as a Write tool in the MCP Shrimp Task Manager MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on init_project_rules? +

Register the MCP Shrimp Task Manager MCP server in PolicyLayer and add a rule for init_project_rules: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MCP Shrimp Task Manager. Nothing to install.

What risk level is init_project_rules? +

init_project_rules is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit init_project_rules? +

Yes. Add a rate_limit block to the init_project_rules rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block init_project_rules completely? +

Set action: deny in the PolicyLayer policy for init_project_rules. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides init_project_rules? +

init_project_rules is provided by the MCP Shrimp Task Manager MCP server (samihalawa/gist-task-manager-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.