broadcast_add · It2 MCP: Risk & Policy

WHAT IT DOES

What broadcast_add does on It2mcp

AI agents use broadcast_add to create or update resources in It2mcp — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your It2mcp environment.

WHY IT NEEDS A POLICY

Why broadcast_add needs a policy

This tool creates a new broadcast group, which is a Write operation (creating new configuration/state). However, broadcast groups in iTerm2 allow input to be sent simultaneously to multiple terminal sessions, so misuse could have high impact — commands typed in one session propagate to all grouped sessions, amplifying the blast radius of any subsequent Execute operations.

From the tool's definition Create a broadcast group with specific sessions

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

broadcast_add Rate-limited

broadcast_add stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "broadcast_add": {
      "limits": [
        {
          "counter": "broadcast_add_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches It2mcp, so you can run agents against it safely.

FAQ

Questions about broadcast_add

What does the broadcast_add tool do? +

Create a broadcast group with specific sessions. It is categorised as a Write tool in the It2mcp MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on broadcast_add? +

Register the It2 MCP server in PolicyLayer and add a rule for broadcast_add: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches It2mcp. Nothing to install.

What risk level is broadcast_add? +

broadcast_add is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit broadcast_add? +

Yes. Add a rate_limit block to the broadcast_add rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block broadcast_add completely? +

Set action: deny in the PolicyLayer policy for broadcast_add. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides broadcast_add? +

broadcast_add is provided by the It2 MCP server (urjitbhatia/it2mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.