Skip to main content
Glama

Create node access rule

create_node_access_rule
Destructive

Add an IP or Origin allowlist rule to a Global node.

New rules are deactivated and do nothing until activated. Active IP rules limit which client IPs can call the node; active origin rules limit which Origin headers it accepts. With both kinds active, a request must pass both. Everything else gets HTTP 403 within about 10 seconds. Rules don't affect the Chainstack API, so they can always be changed or deactivated with these tools.

Before activating, confirm with the user that the IP rules cover every IP that calls the node (servers, CI, their own machine); you can't check this. Origin rules are for browser-only access: once one is active, every request without an Origin header (servers, scripts, curl) is blocked, even from an allowed IP.

If an identical rule exists, it is returned instead of a duplicate.

Input Schema

NameRequiredDescriptionDefault
valueYesFor ip, one IPv4 or IPv6 address (no CIDR ranges). For origin, a host name without scheme or path: example.com, *.example.com (the domain and its subdomains), or * (any origin). Up to 65 characters.
node_idYesNode ID (e.g., ND-123-456-789).
activateNoAlso activate the rule. Only after the user confirms the allowlist.
rule_typeYesip or origin.

Output Schema

NameRequiredDescriptionDefault
ruleYes
createdNo
messageYes
warningsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: new rules are inactive by default, blocked requests get HTTP 403 within ~10 seconds, both rule kinds must pass when both are active, origin rules block any request lacking an Origin header, and identical rules are deduplicated by returning the existing one. It also reassures that the Chainstack API itself is never locked out.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Information is front-loaded (what it does, default state, enforcement effect) and each paragraph serves a purpose. The confirmation and origin-header warnings are valuable but add length that could be tightened slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained, and the description fully covers the mutation's risks, defaults, enforcement semantics, and dedup behavior. An agent has everything needed to call it correctly and to warn the user first.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real meaning by explaining the runtime effect of the ip vs origin rule_type choice and the consequence of setting activate. Syntax constraints (no CIDR, wildcard forms) remain the schema's job, which is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Add an IP or Origin allowlist rule to a Global node.' It also distinguishes itself from siblings like update_node_access_rule and set_node_access_rules_status by establishing that this creates new (initially deactivated) rules rather than altering existing ones.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear operational guidance: rules start deactivated, activation requires user confirmation of the allowlist, and origin rules are only appropriate for browser-only access. It does not explicitly name which sibling to use to modify or deactivate rules, but the surrounding context makes the boundary clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.