detect_file_relationships · Todos MCP: Risk & Policy

WHAT IT DOES

What detect_file_relationships does on Todos

AI agents use detect_file_relationships to create or update resources in Todos — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Todos environment.

WHY IT NEEDS A POLICY

Why detect_file_relationships needs a policy

The tool actively creates new relationship records between tasks (modifies_same_file relationships), which is a Write operation. While it has a read component (detecting file overlap), its primary effect is creating new data in the task management system. Misuse could create spurious or incorrect dependency relationships affecting agent task coordination.

From the tool's definition 'Auto-detect tasks that modify the same files and create modifies_same_file relationships'

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

detect_file_relationships Rate-limited

detect_file_relationships stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "detect_file_relationships": {
      "limits": [
        {
          "counter": "detect_file_relationships_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Todos, so you can run agents against it safely.

FAQ

Questions about detect_file_relationships

What does the detect_file_relationships tool do? +

Auto-detect tasks that modify the same files and create modifies_same_file relationships. It is categorised as a Write tool in the Todos MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on detect_file_relationships? +

Register the Todos MCP server in PolicyLayer and add a rule for detect_file_relationships: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Todos. Nothing to install.

What risk level is detect_file_relationships? +

detect_file_relationships is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit detect_file_relationships? +

Yes. Add a rate_limit block to the detect_file_relationships rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block detect_file_relationships completely? +

Set action: deny in the PolicyLayer policy for detect_file_relationships. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides detect_file_relationships? +

detect_file_relationships is provided by the Todos MCP server (@hasna/todos). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.