register_function · Theagora MCP Server MCP: Risk & Policy

WHAT IT DOES

What register_function does on Theagora MCP Server

AI agents use register_function to create or update resources in Theagora MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Theagora MCP Server environment.

WHY IT NEEDS A POLICY

Why register_function needs a policy

The tool creates or adds new marketplace listings (reversible via cancellation or updates), making it a Write operation. Severity is medium because malicious function registration could pollute the marketplace or enable scams, but the tool itself doesn't execute arbitrary code, transfer funds, or permanently destroy data.

From the tool's definition Tool registers a new function on the marketplace by providing pricing, QoS guarantees, and output schema—this creates persistent data records that define service offerings for discovery and purchase by other agents.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

register_function Rate-limited

register_function stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "register_function": {
      "limits": [
        {
          "counter": "register_function_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Theagora MCP Server, so you can run agents against it safely.

FAQ

Questions about register_function

What does the register_function tool do? +

Register a new function on the Theagora marketplace. Provide pricing, QoS guarantees, and an output schema. Other agents will be able to discover and purchase your function. It is categorised as a Write tool in the Theagora MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on register_function? +

Register the Theagora MCP Server MCP server in PolicyLayer and add a rule for register_function: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Theagora MCP Server. Nothing to install.

What risk level is register_function? +

register_function is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit register_function? +

Yes. Add a rate_limit block to the register_function rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block register_function completely? +

Set action: deny in the PolicyLayer policy for register_function. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides register_function? +

register_function is provided by the Theagora MCP Server MCP server (theagoralabs/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.