pedidos_crear · Laboratorio MCP Gateway MCP: Risk & Policy

WHAT IT DOES

What pedidos_crear does on Laboratorio MCP Gateway

AI agents use pedidos_crear to create or update resources in Laboratorio MCP Gateway — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Laboratorio MCP Gateway environment.

WHY IT NEEDS A POLICY

Why pedidos_crear needs a policy

Creating an order is a Write operation: it produces a new record in the orders system. While it could have financial implications depending on context, there is no explicit indication of payment processing or financial commitment, so Write is the most appropriate category. Severity is medium because creating spurious orders could disrupt business operations but may be reversible (orders can typically be cancelled).

From the tool's definition "Crea un pedido" (Creates an order) — the tool name 'pedidos_crear' and description explicitly indicate creation of a new order record forwarded to the Pedidos server.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

pedidos_crear Rate-limited

pedidos_crear stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pedidos_crear": {
      "limits": [
        {
          "counter": "pedidos_crear_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Laboratorio MCP Gateway, so you can run agents against it safely.

FAQ

Questions about pedidos_crear

What does the pedidos_crear tool do? +

Crea un pedido (reenviado al servidor Pedidos). It is categorised as a Write tool in the Laboratorio MCP Gateway MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on pedidos_crear? +

Register the Laboratorio MCP Gateway MCP server in PolicyLayer and add a rule for pedidos_crear: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Laboratorio MCP Gateway. Nothing to install.

What risk level is pedidos_crear? +

pedidos_crear is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit pedidos_crear? +

Yes. Add a rate_limit block to the pedidos_crear rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block pedidos_crear completely? +

Set action: deny in the PolicyLayer policy for pedidos_crear. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides pedidos_crear? +

pedidos_crear is provided by the Laboratorio MCP Gateway MCP server (tomaslopera/laboratorio_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.