refresh_seed_membership_site · SEED MCP: Risk & Policy

WHAT IT DOES

What refresh_seed_membership_site does on SEED MCP

AI agents invoke refresh_seed_membership_site to trigger actions in SEED MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why refresh_seed_membership_site needs a policy

This tool executes a deployment/refresh operation that modifies live infrastructure (the membership site) based on external state (GitHub branch content). While not immediately destructive, it triggers external processes whose side effects are not fully reversible and depend on what is in the GitHub branch.

From the tool's definition Tool name contains 'refresh' and description states 'Trigger a refresh of the SEED membership site from GitHub public branch' — this initiates an external operation (pulling/deploying from GitHub) whose effects depend on branch content and deployment logic.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

refresh_seed_membership_site Rate-limited

refresh_seed_membership_site stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "refresh_seed_membership_site": {
      "limits": [
        {
          "counter": "refresh_seed_membership_site_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches SEED MCP, so you can run agents against it safely.

FAQ

Questions about refresh_seed_membership_site

What does the refresh_seed_membership_site tool do? +

Trigger a refresh of the SEED membership site from GitHub public branch. It is categorised as a Execute tool in the SEED MCP MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on refresh_seed_membership_site? +

Register the SEED MCP server in PolicyLayer and add a rule for refresh_seed_membership_site: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches SEED MCP. Nothing to install.

What risk level is refresh_seed_membership_site? +

refresh_seed_membership_site is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit refresh_seed_membership_site? +

Yes. Add a rate_limit block to the refresh_seed_membership_site rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block refresh_seed_membership_site completely? +

Set action: deny in the PolicyLayer policy for refresh_seed_membership_site. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides refresh_seed_membership_site? +

refresh_seed_membership_site is provided by the SEED MCP server (sancovp/seed-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.