adjust_memento_confidence · MCP Memento MCP: Risk & Policy

WHAT IT DOES

What adjust_memento_confidence does on MCP Memento

AI agents use adjust_memento_confidence to create or update resources in MCP Memento — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your MCP Memento environment.

WHY IT NEEDS A POLICY

Why adjust_memento_confidence needs a policy

Based on the tool name and sibling context, this tool modifies confidence values associated with mementos in the knowledge base. This is a reversible write operation (confidence can be adjusted up or down). The description is empty, which lowers confidence. Severity is medium because misuse could corrupt the AI assistant's long-term memory reliability/trustworthiness of stored knowledge.

From the tool's definition Tool name: adjust_memento_confidence; description is empty. Sibling tools include 'boost_memento_confidence' and 'apply_memento_confidence_decay', suggesting confidence adjustment is a reversible modification of a memento's metadata.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

adjust_memento_confidence Rate-limited

adjust_memento_confidence stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "adjust_memento_confidence": {
      "limits": [
        {
          "counter": "adjust_memento_confidence_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches MCP Memento, so you can run agents against it safely.

FAQ

Questions about adjust_memento_confidence

What does the adjust_memento_confidence tool do? +

adjust_memento_confidence. It is categorised as a Write tool in the MCP Memento MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on adjust_memento_confidence? +

Register the MCP Memento MCP server in PolicyLayer and add a rule for adjust_memento_confidence: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MCP Memento. Nothing to install.

What risk level is adjust_memento_confidence? +

adjust_memento_confidence is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit adjust_memento_confidence? +

Yes. Add a rate_limit block to the adjust_memento_confidence rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block adjust_memento_confidence completely? +

Set action: deny in the PolicyLayer policy for adjust_memento_confidence. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides adjust_memento_confidence? +

adjust_memento_confidence is provided by the MCP Memento MCP server (x-hannibal/mcp-memento). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.