check_spec_drift · Scrumdo MCP: Risk & Policy

WHAT IT DOES

What check_spec_drift does on Scrumdo

AI agents invoke check_spec_drift to trigger actions in Scrumdo. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why check_spec_drift needs a policy

The tool runs a drift check operation (an external analysis process) against a pull request and returns results. This is not a simple data retrieval; it triggers an active execution process. The blast radius is medium since it is read-like in outcome but executes an external operation whose effects depend on the PR state.

From the tool's definition 'Run the drift check on the card's latest PR + return the report' — explicitly triggers an active check/analysis operation against a PR

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

check_spec_drift Rate-limited

check_spec_drift stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "check_spec_drift": {
      "limits": [
        {
          "counter": "check_spec_drift_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Scrumdo, so you can run agents against it safely.

FAQ

Questions about check_spec_drift

What does the check_spec_drift tool do? +

Run the drift check on the card's latest PR + return the report. It is categorised as a Execute tool in the Scrumdo MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on check_spec_drift? +

Register the Scrumdo MCP server in PolicyLayer and add a rule for check_spec_drift: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Scrumdo. Nothing to install.

What risk level is check_spec_drift? +

check_spec_drift is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit check_spec_drift? +

Yes. Add a rate_limit block to the check_spec_drift rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block check_spec_drift completely? +

Set action: deny in the PolicyLayer policy for check_spec_drift. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides check_spec_drift? +

check_spec_drift is provided by the Scrumdo MCP server (scrumdollc/scrumdo-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.