streamfog_set_lens · Streamfog MCP: Risk & Policy

WHAT IT DOES

What streamfog_set_lens does on Streamfog MCP

AI agents use streamfog_set_lens to create or update resources in Streamfog MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Streamfog MCP environment.

WHY IT NEEDS A POLICY

Why streamfog_set_lens needs a policy

Based on the tool name and server context, this tool likely sets or applies a specific AR lens/filter to the stream, which is a write/modify operation with reversible effects. Confidence is low because the description is empty, so classification relies solely on naming conventions and sibling tool context.

From the tool's definition Tool name 'streamfog_set_lens' and sibling tools context (streamfog_list_lenses, streamfog_toggle_avatar, streamfog_clear_effects) suggest it sets/applies an AR lens or face filter to a live OBS stream.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

streamfog_set_lens Rate-limited

streamfog_set_lens stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "streamfog_set_lens": {
      "limits": [
        {
          "counter": "streamfog_set_lens_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Streamfog MCP, so you can run agents against it safely.

FAQ

Questions about streamfog_set_lens

What does the streamfog_set_lens tool do? +

streamfog_set_lens. It is categorised as a Write tool in the Streamfog MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on streamfog_set_lens? +

Register the Streamfog MCP server in PolicyLayer and add a rule for streamfog_set_lens: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Streamfog MCP. Nothing to install.

What risk level is streamfog_set_lens? +

streamfog_set_lens is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit streamfog_set_lens? +

Yes. Add a rate_limit block to the streamfog_set_lens rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block streamfog_set_lens completely? +

Set action: deny in the PolicyLayer policy for streamfog_set_lens. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides streamfog_set_lens? +

streamfog_set_lens is provided by the Streamfog MCP server (sandraschi/streamfog-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.