move_object

What move_object does on Tencent Cloud COS MCP Server

AI agents use move_object to create or update resources in Tencent Cloud COS MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Tencent Cloud COS MCP Server environment.

Why move_object is rated Medium

Move operations are reversible modifications to data structure and location within Tencent Cloud COS. While the action changes object locations, it does not permanently delete or destroy data (which would be Destructive), nor does it execute arbitrary code. The severity is high because an AI agent could inadvertently reorganize critical storage structures, causing operational disruption.

From the tool's definition Tool name 'move_object' with description '移动COS中的对象' (move objects in COS). Sibling tools include 'copy_object', 'delete_object', 'delete_folder', 'delete_multiple'—all indicating destructive/write capabilities.

The rule that runs move_object safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Tencent Cloud COS MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For move_object, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "move_object": {
      "limits": [
        {
          "counter": "move_object_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about move_object