skills.rest
faisalanjum
faisalanjumCOMMUNITY
Explore all skills by this author →
GitHub

test-disallowed-mcp

Test disallowedTools enforcement by attempting to access a Neo4j Cypher read tool via MCPSearch.

3|1|Updated Dec 2, 2024
Search Tags:#testing#security#access control#mcp#neo4j
One-click install
npx skills add https://github.com/faisalanjum/EventTrader --skill test-disallowed-mcp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: test-disallowed-mcp
Source: https://github.com/faisalanjum/EventTrader/tree/main/.claude/skills/test-disallowed-mcp
Command: npx skills add https://github.com/faisalanjum/EventTrader --skill test-disallowed-mcp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill tests the security mechanism that prevents specific tools from being used, ensuring that disallowedTools correctly blocks access to sensitive functions.

Core Features & Use Cases

  • Security Testing: Verifies that the disallowedTools configuration in SKILL.md effectively blocks specified tools.
  • Access Control Validation: Ensures that MCP tools, particularly those interacting with databases like Neo4j, are restricted as intended.
  • Use Case: A developer wants to confirm that an agent cannot execute a Neo4j Cypher query through MCPSearch when that specific tool is listed under disallowedTools.

Quick Start

Use MCPSearch to attempt loading the mcp__neo4j-cypher__read_neo4j_cypher tool and report if it was blocked.

Frequently Asked Questions about test-disallowed-mcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test if disallowedTools blocks access to specific MCP tools?▼

To test disallowedTools, attempt to access the restricted MCP tool via MCPSearch and verify if the agent blocks the request. This validates that the access control mechanism correctly restricts specified tools.

How does access control validation work for Neo4j Cypher tools in an agentic framework?▼

Access control validation for Neo4j Cypher tools works by configuring the disallowedTools directive in SKILL.md to prevent the agent from executing sensitive database queries. This ensures restricted MCP tools cannot be loaded or invoked.

Can I prevent an agent from executing a Neo4j Cypher read query through MCPSearch?▼

Yes, you can prevent an agent from executing a Neo4j Cypher read query by listing the specific MCP tool under the disallowedTools directive. This blocks the agent from accessing that database interaction tool.

What is the best way to verify that my agent's security configuration blocks sensitive functions?▼

The best way to verify your agent's security configuration is to attempt to load a blocked tool like the Neo4j Cypher read tool via MCPSearch. If the tool is successfully blocked, your access control enforcement is working.

Why does my agent still have access to an MCP tool listed under disallowedTools?▼

If your agent still has access to an MCP tool listed under disallowedTools, the directive in SKILL.md may not be correctly interpreted. You need to validate the access control mechanism to ensure the configuration is properly enforced.

Related Skills

Explore More Software Engineering Skills→
faisalanjumfaisalanjum
3

test-re-mcp-preload

Test direct invocation of the mcp__neo4j-cypher__read_neo4j_cypher tool.

Community
Basic
MassimilianoPiliMassimilianoPili

event-manager

Analyze audit event logs to propose JSON policy adjustments for recurring violations.

Community
Advanced
faisalanjumfaisalanjum
3

test-mcp-wildcard

Test wildcard tool access and execute Neo4j Cypher queries.

Community
Basic
faisalanjumfaisalanjum
3

test-restrict-2026

Test whether allowed-tools restrictions block Grep and Write tool access.

Community
Basic