kya_manifest_schema · UMBRAXON/kya Hub MCP: Risk & Policy

WHAT IT DOES

What kya_manifest_schema does on UMBRAXON/kya Hub

AI agents call kya_manifest_schema to retrieve information from UMBRAXON/kya Hub without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

WHY IT NEEDS A POLICY

Why kya_manifest_schema needs a policy

This tool retrieves schema information via GET request with no side effects. It queries metadata from the KYA-Hub API without modifying, executing, or deleting any data. The read-only nature of both the server and the HTTP method confirm this is a simple data retrieval operation with minimal risk.

From the tool's definition Tool description indicates 'GET /api/protocol/manifest-schema' which is a read-only HTTP GET request. Server description states this is a 'Read-only MCP server' that 'Exposes tools to fetch' data.

Attacks that exploit this kind of access

Questions about kya_manifest_schema

What does the kya_manifest_schema tool do? +

GET /api/protocol/manifest-schema. It is categorised as a Read tool in the UMBRAXON/kya Hub MCP Server, which means it retrieves data without modifying state.

How do I enforce a policy on kya_manifest_schema? +

Register the UMBRAXON/kya Hub MCP server in PolicyLayer and add a rule for kya_manifest_schema: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches UMBRAXON/kya Hub. Nothing to install.

What risk level is kya_manifest_schema? +

kya_manifest_schema is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit kya_manifest_schema? +

Yes. Add a rate_limit block to the kya_manifest_schema rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block kya_manifest_schema completely? +

Set action: deny in the PolicyLayer policy for kya_manifest_schema. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides kya_manifest_schema? +

kya_manifest_schema is provided by the UMBRAXON/kya Hub MCP server (umbraxon/kya-hub). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.