kura_create · KURA Notes MCP Client MCP: Risk & Policy

WHAT IT DOES

What kura_create does on KURA Notes MCP Client

AI agents use kura_create to create or update resources in KURA Notes MCP Client — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your KURA Notes MCP Client environment.

WHY IT NEEDS A POLICY

Why kura_create needs a policy

This tool creates new notes, which is a reversible write operation. Notes can typically be edited or deleted later, making this Write rather than Destructive. The blast radius is low since note creation alone cannot directly compromise existing data, delete information, or cause financial harm. Confidence is high due to explicit use of 'Create' in the description.

From the tool's definition Tool description states 'Create a new text note' which is a write operation that adds data to the KURA Notes system. The context confirms this server handles 'note creation, retrieval, and management' with reversible operations.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

kura_create Rate-limited

kura_create stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "kura_create": {
      "limits": [
        {
          "counter": "kura_create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches KURA Notes MCP Client, so you can run agents against it safely.

FAQ

Questions about kura_create

What does the kura_create tool do? +

Create a new text note in KURA Notes. Use this to capture ideas, information, or any text content. It is categorised as a Write tool in the KURA Notes MCP Client MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on kura_create? +

Register the KURA Notes MCP Client MCP server in PolicyLayer and add a rule for kura_create: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches KURA Notes MCP Client. Nothing to install.

What risk level is kura_create? +

kura_create is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit kura_create? +

Yes. Add a rate_limit block to the kura_create rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block kura_create completely? +

Set action: deny in the PolicyLayer policy for kura_create. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides kura_create? +

kura_create is provided by the KURA Notes MCP Client MCP server (tillmatthis/kura-notes-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.