AI agents call request_update as a supporting operation in Football Docs workflows.
The description is cut off and provides insufficient information to determine what this tool does. The name 'request_update' suggests submitting a request (possibly a Write action), but given the server context of a documentation provider for AI coding agents, it may simply flag a doc update request rather than modifying data directly. Without more detail, confidence is low.
From the tool's definition Tool description is truncated and uninformative: 'Request that a provider' — the description is incomplete, leaving the action ambiguous.
Documented attack patterns abuse exactly the kind of access request_update gives an agent:
PolicyLayer is an MCP gateway — it sits between your AI agents and Football Docs, and nothing reaches the server without passing your rules. This is the rule we recommend for request_update:
{
"version": "1",
"default": "deny",
"tools": {
"request_update": {
"limits": [
{
"counter": "request_update_rate",
"window": "minute",
"max": 60,
"scope": "grant"
}
]
}
}
}request_update gets a rate cap, and everything else on the server is denied unless you say otherwise.
Free to start. No card required.
Request that a provider. It is categorised as a Other tool in the Football Docs MCP Server, which means it performs auxiliary operations.
Register the Football Docs MCP server in PolicyLayer and add a rule for request_update: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Football Docs. Nothing to install.
request_update is a Other tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the request_update rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for request_update. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
request_update is provided by the Football Docs MCP server (withqwerty/football-docs). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Start from Football Docs, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.
Free to start. No card required.
5 Football Docs tools catalogued and risk-classified — across an index of 43,000+ MCP servers.