uxi_assign_service_test_to_group

What uxi_assign_service_test_to_group does on API-Central

AI agents use uxi_assign_service_test_to_group to create or update resources in API-Central, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your API-Central environment.

Why uxi_assign_service_test_to_group is rated Medium

This tool creates or modifies configurations (assigning tests to groups) without deleting data or executing arbitrary code. It is a reversible write operation on network monitoring infrastructure. Severity is medium because misconfiguration of UXI service tests could impact network monitoring visibility, but the blast radius is limited to test assignment scope, not widespread network operations or data destruction.

From the tool's definition Tool name contains 'assign' and description explicitly states 'requires read-write access', indicating modification of test assignments. The action creates or modifies the association between a UXI service test and a group.

The rule that runs uxi_assign_service_test_to_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and API-Central, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For uxi_assign_service_test_to_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "uxi_assign_service_test_to_group": {
      "limits": [
        {
          "counter": "uxi_assign_service_test_to_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about uxi_assign_service_test_to_group