astroquery_query · Astro MCP: Risk & Policy

WHAT IT DOES

What astroquery_query does on Astro MCP

AI agents invoke astroquery_query to trigger actions in Astro MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why astroquery_query needs a policy

This tool executes queries against external astronomical services and APIs. While it is primarily a read/search operation, 'universal query against any astroquery service' implies arbitrary query execution across many external systems, which could include operations beyond simple reads depending on the service and query.

From the tool's definition 'Perform a universal query against any astroquery service' — executing queries against 40+ astronomical databases and external services

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

astroquery_query Rate-limited

astroquery_query stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "astroquery_query": {
      "limits": [
        {
          "counter": "astroquery_query_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Astro MCP, so you can run agents against it safely.

FAQ

Questions about astroquery_query

What does the astroquery_query tool do? +

Perform a universal query against any astroquery service. It is categorised as a Execute tool in the Astro MCP MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on astroquery_query? +

Register the Astro MCP server in PolicyLayer and add a rule for astroquery_query: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Astro MCP. Nothing to install.

What risk level is astroquery_query? +

astroquery_query is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit astroquery_query? +

Yes. Add a rate_limit block to the astroquery_query rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block astroquery_query completely? +

Set action: deny in the PolicyLayer policy for astroquery_query. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides astroquery_query? +

astroquery_query is provided by the Astro MCP server (sandyyuan/astro_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.