xbrl_run_formula · Arelle MCP: Risk & Policy

WHAT IT DOES

What xbrl_run_formula does on Arelle

AI agents invoke xbrl_run_formula to trigger actions in Arelle. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why xbrl_run_formula needs a policy

The tool executes formulas—a form of computation—within XBRL filings. This is Execute-category because it runs code-like operations that process arguments and produce dependent results, rather than merely reading data. Severity is high because formula execution in financial filings could produce incorrect calculated values, misleading analyses, or downstream financial decisions if exploited.

From the tool's definition Tool name 'xbrl_run_formula' indicates execution of formulas within XBRL context. Empty description prevents full certainty, but formula execution in financial filing systems constitutes running code-like operations whose effects depend on formula arguments.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

xbrl_run_formula Rate-limited

xbrl_run_formula stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "xbrl_run_formula": {
      "limits": [
        {
          "counter": "xbrl_run_formula_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Arelle, so you can run agents against it safely.

FAQ

Questions about xbrl_run_formula

What does the xbrl_run_formula tool do? +

xbrl_run_formula. It is categorised as a Execute tool in the Arelle MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on xbrl_run_formula? +

Register the Arelle MCP server in PolicyLayer and add a rule for xbrl_run_formula: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Arelle. Nothing to install.

What risk level is xbrl_run_formula? +

xbrl_run_formula is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit xbrl_run_formula? +

Yes. Add a rate_limit block to the xbrl_run_formula rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block xbrl_run_formula completely? +

Set action: deny in the PolicyLayer policy for xbrl_run_formula. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides xbrl_run_formula? +

xbrl_run_formula is provided by the Arelle MCP server (thekinghippopotamus/arelle-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.