AGENTFORCE-AF-12: Over-Broad Agent Fabric Registry Tool Access
🟡 Medium · MuleSoft Agent Fabric
Detects Agent Network registry agents and v1 brokers that reference an MCP server with no allowed tool list while the server exposes write tools, so the agent can call every current and future tool.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-AF-12 |
| Severity | Medium |
| Category | MuleSoft Agent Fabric |
Remediation
List only the tools the agent needs: tools: [{mcp: {ref: {name: <server>}, allowed: [get_x, search_y]}}]. Keep write tools out of the list, or on a separate server reached only through an approval step.