在 Android 设备上设置 HTTP 代理。注意：此方式对部分应用可能无效，建议在 Wi-Fi 设置中手动配置。
AI agents invoke android_setup_proxy to trigger actions in Android Proxy MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.
This tool configures a proxy on an Android device, which is an external operation that intercepts network traffic. It modifies system-level network settings on the device and can redirect all HTTP/HTTPS traffic, making it an Execute-category action with high severity since misuse could expose sensitive traffic or disrupt device connectivity.
From the tool's definition '在 Android 设备上设置 HTTP 代理' (Set up HTTP proxy on Android device) — triggers an external configuration operation on a physical/virtual device, routing all HTTP traffic through a proxy
Attacks that exploit this kind of access
在 Android 设备上设置 HTTP 代理。注意：此方式对部分应用可能无效，建议在 Wi-Fi 设置中手动配置。. It is categorised as a Execute tool in the Android Proxy MCP MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
Register the Android Proxy MCP server in PolicyLayer and add a rule for android_setup_proxy: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Android Proxy MCP. Nothing to install.
android_setup_proxy is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the android_setup_proxy rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for android_setup_proxy. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
android_setup_proxy is provided by the Android Proxy MCP server (zhizhuodemao/android_proxy_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.