# replace_picture 그림 객체의 geometry를 유지하고 연결된 이미지 asset만 교체합니다. Agent View of the PolicyLayer registry record for `replace_picture`. HTML page: https://policylayer.com/tools/airmang-hwpx-mcp-server/replace-picture ## Facts - Tool: `replace_picture` - Server: Hwpx (`airmang/hwpx-mcp-server`) — https://policylayer.com/tools/airmang-hwpx-mcp-server.md - Homepage: https://github.com/airmang/hwpx-mcp-server - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "replace_picture", "arguments": {} } } ``` ## Why replace_picture is rated Medium This tool modifies existing document content by swapping out an image asset, which is a Write operation (reversible modification). It does not execute code, delete content irreversibly, or move financial resources. The severity is medium because misuse could substitute images with inappropriate or malicious content, affecting document integrity, but the change is reversible. From the tool's own definition: "Tool replaces (교체합니다) the image asset linked to a picture object while maintaining its geometry. The description explicitly indicates modification of document content (the image asset), which is reversible—the original image can be restored by replacing it…" ## Use case AI agents use replace_picture to create or update resources in Hwpx, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Hwpx environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Hwpx: ```json { "version": "1", "default": "deny", "tools": { "replace_picture": { "limits": [ { "counter": "replace_picture_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Hwpx (108) - `delete_paragraph` — Destructive — https://policylayer.com/tools/airmang-hwpx-mcp-server/delete-paragraph.md - `remove_memo` — Destructive — https://policylayer.com/tools/airmang-hwpx-mcp-server/remove-memo.md - `build_image_grid` — Execute — https://policylayer.com/tools/airmang-hwpx-mcp-server/build-image-grid.md - `compute_report_value` — Execute — https://policylayer.com/tools/airmang-hwpx-mcp-server/compute-report-value.md - `repair_hwpx` — Execute — https://policylayer.com/tools/airmang-hwpx-mcp-server/repair-hwpx.md - `analyze_document_plan` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/analyze-document-plan.md - `analyze_form_fill` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/analyze-form-fill.md - `analyze_quality_generation` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/analyze-quality-generation.md - `analyze_template_formfit` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/analyze-template-formfit.md - `check_seal_compliance` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/check-seal-compliance.md - `compare_style_profiles` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/compare-style-profiles.md - `describe_capabilities` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/describe-capabilities.md - `describe_template` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/describe-template.md - `doc_diff` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/doc-diff.md - `document_extract_json` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/document-extract-json.md - `document_to_markdown` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/document-to-markdown.md - `extract_style_profile` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/extract-style-profile.md - `find_cell_by_label` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/find-cell-by-label.md - `find_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/find-text.md - `get_document_info` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-document-info.md - `get_document_map` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-document-map.md - `get_document_outline` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-document-outline.md - `get_document_plan_schema` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-document-plan-schema.md - `get_document_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-document-text.md - `get_location_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-location-text.md - `get_paragraph_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-paragraph-text.md - `get_paragraphs_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-paragraphs-text.md - `get_table_map` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-table-map.md - `get_table_text` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/get-table-text.md - `hwpx_extract_json` — Read — https://policylayer.com/tools/airmang-hwpx-mcp-server/hwpx-extract-json.md - …and 78 more: https://policylayer.com/tools/airmang-hwpx-mcp-server.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=airmang-hwpx-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/airmang-hwpx-mcp-server