Stream-search and normalize DOL OFLC disclosure XLSX records across LCA, PERM, H-2A, H-2B, and CW programs. ROUTE BY VISA PROGRAM: H-2A is AGRICULTURAL seasonal labor (farms, ranches, NAICS 11) — never use H-2B for farms. H-2B is NON-AGRICULTURAL seasonal labor (landscaping, hospitality, construc...
AI agents call foreign_labor_search to retrieve information from DOL WHD MCP without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
This tool retrieves and searches existing Department of Labor enforcement and labor certification disclosure data. The description emphasizes querying and normalizing records across multiple visa program databases, which is a Read operation. No side effects, data modifications, code execution, financial transactions, or destructive actions are indicated.
From the tool's definition Tool performs 'stream-search and normalize' of DOL disclosure records across visa programs (LCA, PERM, H-2A, H-2B, CW). Retrieves and queries government labor certification data with no mutations, deletions, or external operations triggered.
Attacks that exploit this kind of access
Stream-search and normalize DOL OFLC disclosure XLSX records across LCA, PERM, H-2A, H-2B, and CW programs. ROUTE BY VISA PROGRAM: H-2A is AGRICULTURAL seasonal labor (farms, ranches, NAICS 11) — never use H-2B for farms. H-2B is NON-AGRICULTURAL seasonal labor (landscaping, hospitality, construction, seafood processing) — never use H-2A here. LCA covers H-1B / H-1B1 / E-3 specialty occupations (tech, healthcare, engineering, academics) and is wrong for ag or seasonal labor. PERM is permanent labor certification (green-card sponsorship). CW is CNMI-only. DO NOT call this tool for general restaurant or business research — restaurants almost never sponsor visa workers; use places_search instead. The first call for a given (visaProgram, fiscalYear, fiscalQuarter) downloads the official disclosure workbook and builds a gzipped JSONL cache (slow, can take 30-90s for big LCA quarters); subsequent calls hit the cache in 1-3 seconds. To avoid first-call timeouts, narrow with maxItems and one or more of employerName, worksiteState, socCode, or caseStatus. It is categorised as a Read tool in the DOL WHD MCP MCP Server, which means it retrieves data without modifying state.
Register the DOL WHD MCP server in PolicyLayer and add a rule for foreign_labor_search: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches DOL WHD MCP. Nothing to install.
foreign_labor_search is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the foreign_labor_search rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for foreign_labor_search. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
foreign_labor_search is provided by the DOL WHD MCP server (uhq-actual/dol_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →