# create_site_script

Create a new site script (custom JS/CSS snippet).

Agent View of the PolicyLayer registry record for `create_site_script`. HTML page: https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/create-site-script

## Facts

- Tool: `create_site_script`
- Server: Thinkific MCP Server (`ackbarguppi-ai/thinkific-mcp`) — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp.md
- Homepage: https://github.com/ackbarguppi-ai/thinkific-mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_site_script",
    "arguments": {}
  }
}
```

## Why create_site_script is rated Medium

Creating custom JS/CSS snippets is a reversible write operation that modifies site functionality. The severity is medium rather than high because: (1) the blast radius is limited to the specific Thinkific site, (2) such scripts could pose XSS risks or site defacement concerns but depend on the actual script content, and (3) while impactful, the changes are not inherently destructive or irreversible.

From the tool's own definition: "Tool name 'create_site_script' and description 'Create a new site script (custom JS/CSS snippet)' indicate creation of new code artifacts that modify site behavior."

## Use case

AI agents use create_site_script to create or update resources in Thinkific MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Thinkific MCP Server environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Thinkific MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_site_script": {
      "limits": [
        {
          "counter": "create_site_script_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Thinkific MCP Server (108)

- `delete_category` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-category.md
- `delete_coupon` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-coupon.md
- `delete_group` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-group.md
- `delete_instructor` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-instructor.md
- `delete_promotion` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-promotion.md
- `delete_site_script` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-site-script.md
- `delete_user` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-user.md
- `gql_bulk_remove_users_from_groups` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/gql-bulk-remove-users-from-groups.md
- `remove_group_analyst` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/remove-group-analyst.md
- `remove_products_from_category` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/remove-products-from-category.md
- `create_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/create-external-order.md
- `purchase_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/purchase-external-order.md
- `refund_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/refund-external-order.md
- `get_bundle` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-bundle.md
- `get_category` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-category.md
- `get_chapter` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-chapter.md
- `get_content` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-content.md
- `get_coupon` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-coupon.md
- `get_course` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-course.md
- `get_course_review` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-course-review.md
- `get_enrollment` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-enrollment.md
- `get_group` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-group.md
- `get_instructor` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-instructor.md
- `get_order` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-order.md
- `get_performance_metrics` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-performance-metrics.md
- `get_product` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-product.md
- `get_promotion` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-promotion.md
- `get_promotion_by_coupon` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-promotion-by-coupon.md
- `get_publish_request` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-publish-request.md
- `get_site_info` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-site-info.md
- …and 78 more: https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=ackbarguppi-ai-thinkific-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/ackbarguppi-ai-thinkific-mcp