stockyard_query · Stockyard MCP Server MCP: Risk & Policy

WHAT IT DOES

What stockyard_query does on Stockyard MCP Server

AI agents invoke stockyard_query to trigger actions in Stockyard MCP Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why stockyard_query needs a policy

Given the server manages tools with embedded SQLite databases and the tool is described only as 'Query a Stockyard tool,' this likely executes queries (potentially SQL) against one of 150 developer tools. The ambiguity of 'query' against arbitrary tool backends elevates this beyond a simple Read — it could trigger operations, run queries with side effects, or interact with tool internals in unpredictable ways.

From the tool's definition Tool name 'stockyard_query' and description 'Query a Stockyard tool' — the description is minimal/uninformative, but the server context mentions embedded SQLite databases and 150 developer tools, suggesting this executes queries against tool databases.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

stockyard_query Rate-limited

stockyard_query stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "stockyard_query": {
      "limits": [
        {
          "counter": "stockyard_query_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Stockyard MCP Server, so you can run agents against it safely.

FAQ

Questions about stockyard_query

What does the stockyard_query tool do? +

Query a Stockyard tool. It is categorised as a Execute tool in the Stockyard MCP Server MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on stockyard_query? +

Register the Stockyard MCP Server MCP server in PolicyLayer and add a rule for stockyard_query: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Stockyard MCP Server. Nothing to install.

What risk level is stockyard_query? +

stockyard_query is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit stockyard_query? +

Yes. Add a rate_limit block to the stockyard_query rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block stockyard_query completely? +

Set action: deny in the PolicyLayer policy for stockyard_query. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides stockyard_query? +

stockyard_query is provided by the Stockyard MCP Server MCP server (stockyard-dev/stockyard-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.