// SCAN REPORT

Doc/docx

23 tools. 20 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

20 can modify or destroy data

3 read-only

23 tools total

Community server · catalogue entry verified 11/06/2026

How to control Doc/docx ↓

TOOL MAP

What Doc/docx exposes to your agents

Read (3) Write / Execute (17) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Doc/docx tools

Destructive · High delete_paragraph This tool irreversibly deletes data (document paragraphs) that cannot be recovered through the tool itself. Destructive · High delete_table_row This tool irreversibly removes table row data from a docx file. Destructive · Medium delete_text The tool deletes content from a document. Write · Medium add_heading This tool creates or modifies document structure by adding a heading element with specified text and formatting level.

20 of Doc/docx's 23 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Doc/docx

PolicyLayer is an MCP gateway — it sits between your AI agents and Doc/docx, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_paragraph": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "find_and_replace": {
    "limits": [
      {
        "counter": "find_and_replace_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_document_info": {
    "limits": [
      {
        "counter": "get_document_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Doc/docx — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON DOC/DOCX →

Free to start. No card required.

FULL CATALOGUE

All 23 Doc/docx tools

DESTRUCTIVE 3 tools

Destructive delete_paragraph Delete specified paragraph from document Parameters: - paragraph_index: Paragraph index to delete Destructive delete_table_row Delete a row from table Parameters: - table_index: Table index - row_index: Row index to dele Destructive delete_text Delete specified text from paragraph Parameters: - paragraph_index: Paragraph index - start_p

WRITE 17 tools

Write find_and_replace Find and replace text in the document Parameters: - find_text: Text to find - replace_text: T Write search_and_replace Search and replace text in the document, providing detailed replacement information and preview options Write add_heading Add heading to document Parameters: - text: Heading text - level: Heading level (1-9) Write add_page_break Add page break Write add_paragraph Add paragraph text to document Parameters: - text: Paragraph text content - bold: Whether to Write add_table Add table to document Parameters: - rows: Number of rows - cols: Number of columns - data Write add_table_row Add a row to table Parameters: - table_index: Table index - data: Row data in list format Write create_document Create a new Word document Parameters: - file_path: Document save path Write create_document_copy create_document_copy Write edit_section_by_keyword Find paragraphs containing specified keyword and replace them and their surrounding content, keeping original Write edit_table_cell Edit table cell content Parameters: - table_index: Table index - row_index: Row index - c Write merge_table_cells Merge table cells Parameters: - table_index: Table index - start_row: Start row index - s Write replace_section Find specified title in document and replace content under that title, keeping original position, format, and Write save_as_document Save current document as a new file Parameters: - new_file_path: Path to save the new file Write save_document Save the currently open Word document to the original file (update the original file) Write set_page_margins Set page margins Parameters: - top: Top margin (cm) - bottom: Bottom margin (cm) - left: Write split_table Split table into two tables at specified row Parameters: - table_index: Table index - row_ind

READ 3 tools

Read get_document_info Get document information, including paragraph count, table count, styles, etc. Read search_text Search for text in the document Parameters: - keyword: Keyword to search for Read open_document Open an existing Word document Parameters: - file_path: Path to the document to open

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Doc/docx

Can an AI agent delete data through the Doc/docx MCP server? +

Yes. The Doc/docx server exposes 3 destructive tools including delete_paragraph, delete_table_row, delete_text. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Doc/docx? +

The Doc/docx server has 17 write tools including find_and_replace, search_and_replace, add_heading. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Doc/docx.

How many tools does the Doc/docx MCP server expose? +

23 tools across 3 categories: Destructive, Read, Write. 3 are read-only. 20 can modify, create, or delete data.

How do I enforce a policy on Doc/docx? +

Register the Doc/docx MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Doc/docx tool call.

Deterministic rules across all 23 Doc/docx tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DOC/DOCX →

Free to start. No card required.

23 Doc/docx tools catalogued and risk-classified — across an index of 43,000+ MCP servers.