# create_pack

Create a new PRIVATE design pack in the user's "version library" — YOU (the AI) design it, then pass the HTML + CSS. The server sanitizes (never executes) and stores it, returning { packId, status:"ready", previewUrl } immediately (no polling). previewUrl = demo-<packId>.a3plus.sogdia.market. Pick category from list_pack_categories. DESIGN RULES for the html you generate: • html = the INNER content of <main> for the home page only. Do NOT include <html>/<head>/<body>/<script>/<style>/<link>. Put ALL CSS in the css field. • Mark injectable per-site content so one design serves many sites: text → data-field="<path>" e.g. <h1 data-field="page.home.hero.headline">Big headline</h1> image attrs → data-field-attr="src:<path>, alt:<path>" e.g. <img data-field-attr="src:page.home.hero.image, alt:page.home.hero.headline"> repeating list → data-loop="articles" on a container; children use relative .title .url .image .category Useful paths: brand.name, brand.ctaText, brand.ctaUrl, page.home.hero.headline, page.home.hero.subhead, page.home.hero.image. • Keep sensible DEFAULT placeholder copy inside the tags so it renders standalone. • EXACTLY ONE <h1>. Semantic HTML (header/sections/footer). Every <img> has alt. Use class names, not inline styles. • Motion is allowed via CSS ONLY: @keyframes / animation / transition / transform in the css field. NO <script>, NO on* handlers, NO external fonts/CDN (use a system font stack). Scripts are stripped and blocked by CSP.

Agent View of the PolicyLayer registry record for `create_pack`. HTML page: https://policylayer.com/tools/a3plus-mcp/create-pack

## Facts

- Tool: `create_pack`
- Server: A3plus (`a3plus-mcp`) — https://policylayer.com/tools/a3plus-mcp.md
- Install: `npx -y a3plus-mcp`
- Homepage: https://www.npmjs.com/package/a3plus-mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 6 (3 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `css` | string | no | All CSS for the page (supports @keyframes/animation/transition for motion). |
| `html` | string | yes | The home-page inner HTML you generated (inside <main>), following the DESIGN RULES above (data-field markers, one <h1>, no scripts). |
| `name` | string | yes | Human name for the pack, ≤120 chars (also becomes the URL slug). |
| `brief` | string | no | Optional. If you pass a brief INSTEAD of html, the server generates the design itself (async → poll get_pack). Prefer generating the html yourself. |
| `tokens` | object | no | Optional design tokens metadata (e.g. { colors, font, radius }). |
| `category` | string | yes | A category id from list_pack_categories (e.g. casino, blog, restaurant). |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_pack",
    "arguments": {
      "html": "<html>",
      "name": "<name>",
      "category": "<category>"
    }
  }
}
```

## Why create_pack is rated Medium

An AI agent can call create_pack faster than any human can review: one bad instruction and it creates or modifies resources in A3plus by the hundred, each call as confident as the last.

Risk signals: Accepts raw HTML/template content (html)

## Use case

AI agents use create_pack to create or update resources in A3plus, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your A3plus environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches A3plus:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_pack": {
      "limits": [
        {
          "counter": "create_pack_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on A3plus (60)

- `delete_article` — Destructive — https://policylayer.com/tools/a3plus-mcp/delete-article.md
- `delete_sites` — Destructive — https://policylayer.com/tools/a3plus-mcp/delete-sites.md
- `list_domains` — Destructive — https://policylayer.com/tools/a3plus-mcp/list-domains.md
- `remove_project_member` — Destructive — https://policylayer.com/tools/a3plus-mcp/remove-project-member.md
- `update_article` — Destructive — https://policylayer.com/tools/a3plus-mcp/update-article.md
- `retry_sites` — Execute — https://policylayer.com/tools/a3plus-mcp/retry-sites.md
- `transfer_sites` — Financial — https://policylayer.com/tools/a3plus-mcp/transfer-sites.md
- `audit_project_articles` — Read — https://policylayer.com/tools/a3plus-mcp/audit-project-articles.md
- `bind_domain` — Read — https://policylayer.com/tools/a3plus-mcp/bind-domain.md
- `bredgio_list_agents` — Read — https://policylayer.com/tools/a3plus-mcp/bredgio-list-agents.md
- `bredgio_logout` — Read — https://policylayer.com/tools/a3plus-mcp/bredgio-logout.md
- `bredgio_status` — Read — https://policylayer.com/tools/a3plus-mcp/bredgio-status.md
- `bredgio_task_status` — Read — https://policylayer.com/tools/a3plus-mcp/bredgio-task-status.md
- `get_article` — Read — https://policylayer.com/tools/a3plus-mcp/get-article.md
- `get_intake_schema` — Read — https://policylayer.com/tools/a3plus-mcp/get-intake-schema.md
- `get_pack` — Read — https://policylayer.com/tools/a3plus-mcp/get-pack.md
- `get_playbook` — Read — https://policylayer.com/tools/a3plus-mcp/get-playbook.md
- `get_project` — Read — https://policylayer.com/tools/a3plus-mcp/get-project.md
- `get_project_readiness` — Read — https://policylayer.com/tools/a3plus-mcp/get-project-readiness.md
- `get_site_brand` — Read — https://policylayer.com/tools/a3plus-mcp/get-site-brand.md
- `get_site_content` — Read — https://policylayer.com/tools/a3plus-mcp/get-site-content.md
- `get_site_faq` — Read — https://policylayer.com/tools/a3plus-mcp/get-site-faq.md
- `get_site_seo` — Read — https://policylayer.com/tools/a3plus-mcp/get-site-seo.md
- `get_static_pages` — Read — https://policylayer.com/tools/a3plus-mcp/get-static-pages.md
- `gsc_search_analytics` — Read — https://policylayer.com/tools/a3plus-mcp/gsc-search-analytics.md
- `gsc_site_detail` — Read — https://policylayer.com/tools/a3plus-mcp/gsc-site-detail.md
- `gsc_sites` — Read — https://policylayer.com/tools/a3plus-mcp/gsc-sites.md
- `gsc_zero_data_sites` — Read — https://policylayer.com/tools/a3plus-mcp/gsc-zero-data-sites.md
- `index_coverage_report` — Read — https://policylayer.com/tools/a3plus-mcp/index-coverage-report.md
- `list_articles` — Read — https://policylayer.com/tools/a3plus-mcp/list-articles.md
- …and 30 more: https://policylayer.com/tools/a3plus-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=a3plus-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/a3plus-mcp
