import_onboarding_fixture

What import_onboarding_fixture does on Todos

AI agents use import_onboarding_fixture to create or update resources in Todos, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Todos environment.

Why import_onboarding_fixture is rated Medium

This tool creates or modifies task data by importing fixtures. While the dry-run mode mitigates some risk, the apply mode performs reversible data creation/modification (Write category). Severity is medium because fixture imports could overwrite existing tasks or create unwanted task state, but the operation is reversible and limited to local onboarding fixtures (not arbitrary data sources).

From the tool's definition Tool description states 'apply a bundled local onboarding fixture import' — the 'apply' verb indicates data modification/creation. The 'dry-run' default reduces immediate risk but the tool's purpose is to write/import fixture data into the system.

The rule that runs import_onboarding_fixture safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Todos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For import_onboarding_fixture, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "import_onboarding_fixture": {
      "limits": [
        {
          "counter": "import_onboarding_fixture_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about import_onboarding_fixture