set_routing · Moku MCP Server MCP: Risk & Policy

WHAT IT DOES

What set_routing does on Moku MCP Server

AI agents use set_routing to create or update resources in Moku MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Moku MCP Server environment.

WHY IT NEEDS A POLICY

Why set_routing needs a policy

This tool modifies signal routing configuration on a physical device (Moku). While routing changes are typically reversible through reconfiguration (distinguishing it from Destructive), the tool can cause immediate functional changes to hardware signal flow.

From the tool's definition Tool name 'set_routing' with description 'Configure MCC signal routing' indicates modification of device routing configuration. The server description confirms this tool enables 'configuration deployment' and 'signal routing' on Moku devices.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

set_routing Rate-limited

set_routing stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "set_routing": {
      "limits": [
        {
          "counter": "set_routing_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Moku MCP Server, so you can run agents against it safely.

FAQ

Questions about set_routing

What does the set_routing tool do? +

Configure MCC signal routing. It is categorised as a Write tool in the Moku MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on set_routing? +

Register the Moku MCP Server MCP server in PolicyLayer and add a rule for set_routing: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Moku MCP Server. Nothing to install.

What risk level is set_routing? +

set_routing is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit set_routing? +

Yes. Add a rate_limit block to the set_routing rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block set_routing completely? +

Set action: deny in the PolicyLayer policy for set_routing. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides set_routing? +

set_routing is provided by the Moku MCP Server MCP server (sealablab/moku-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.