system_ntp_server_create

What system_ntp_server_create does on Truenas

AI agents use system_ntp_server_create to create or update resources in Truenas, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Truenas environment.

Why system_ntp_server_create is rated Medium

This tool creates a new NTP server entry in system configuration, which is a reversible write operation. While it modifies system settings that could impact time synchronization across the system (moderate blast radius), the change can be undone by deleting the server entry. It does not delete data (Destructive), execute arbitrary code (Execute), move money (Financial), or trigger uncontrolled external operations.

From the tool's definition Tool name 'system_ntp_server_create' and description 'Add a new NTP time server to the system configuration' indicate creation/modification of system configuration data.

Risk signalsAdmin/system-level operation

The rule that runs system_ntp_server_create safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Truenas, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For system_ntp_server_create, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "system_ntp_server_create": {
      "limits": [
        {
          "counter": "system_ntp_server_create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about system_ntp_server_create