manage_analytics · Thales Cdsp Csm MCP: Risk & Policy

WHAT IT DOES

What manage_analytics does on Thales Cdsp Csm

AI agents call manage_analytics as a supporting operation in Thales Cdsp Csm workflows.

WHY IT NEEDS A POLICY

Why manage_analytics needs a policy

With no description available, I cannot determine what this tool does beyond its name. 'manage_analytics' suggests it may retrieve or display analytics data (Read), but 'manage' could imply write or configuration changes. Given the server context (secrets management), analytics likely involves querying usage/audit data. However, with no description, confidence is low.

From the tool's definition Tool description is empty and uninformative; tool name is 'manage_analytics'

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

manage_analytics Rate-limited

manage_analytics gets a rate cap, and everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "manage_analytics": {
      "limits": [
        {
          "counter": "manage_analytics_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}

SET A RULE FOR THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Thales Cdsp Csm, so you can run agents against it safely.

FAQ

Questions about manage_analytics

What does the manage_analytics tool do? +

manage_analytics. It is categorised as a Other tool in the Thales Cdsp Csm MCP Server, which means it performs auxiliary operations.

How do I enforce a policy on manage_analytics? +

Register the Thales Cdsp Csm MCP server in PolicyLayer and add a rule for manage_analytics: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Thales Cdsp Csm. Nothing to install.

What risk level is manage_analytics? +

manage_analytics is a Other tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit manage_analytics? +

Yes. Add a rate_limit block to the manage_analytics rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block manage_analytics completely? +

Set action: deny in the PolicyLayer policy for manage_analytics. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides manage_analytics? +

manage_analytics is provided by the Thales Cdsp Csm MCP server (sanyambassi/thales-cdsp-csm-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.