add_users_to_group

What add_users_to_group does on Ludus FastMCP

AI agents use add_users_to_group to create or update resources in Ludus FastMCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Ludus FastMCP environment.

Why add_users_to_group is rated Medium

This tool creates or modifies group membership associations, which is a reversible data modification operation (Write category). Severity is medium because incorrect group assignments could grant unintended access to range resources or affect user permissions in a cyber range environment, but the action is reversible and the blast radius is limited to group membership changes rather than data deletion or financial…

From the tool's definition Tool name 'add_users_to_group' and description 'Add users to a group' indicates creation/modification of group membership data. This is a reversible write operation that modifies user-group relationships.

The rule that runs add_users_to_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ludus FastMCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For add_users_to_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_users_to_group": {
      "limits": [
        {
          "counter": "add_users_to_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about add_users_to_group