Medium Risk

autoform_fill_batch_acroform

Genera MULTIPLES PDFs a partir de un PDF con campos AcroForm (formulario interactivo) + array de datos. Una sola llamada genera N documentos. CUANDO USAR: El PDF base tiene campos AcroForm (detectados con autoform_detect_fields) y el usuario quiere llenarlos con datos de varias personas/filas. E...

Part of the Autoform MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.

AI agents use autoform_fill_batch_acroform to create or modify resources in Autoform. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call autoform_fill_batch_acroform repeatedly, creating or modifying resources faster than any human could review. Intercept's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach Autoform.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

autoform.yaml
tools:
  autoform_fill_batch_acroform:
    rules:
      - action: allow
        rate_limit:
          max: 30
          window: 60

See the full Autoform policy for all 11 tools.

Tool Name autoform_fill_batch_acroform
Category Write
MCP Server Autoform MCP Server
Risk Level Medium

View all 11 tools →

Agents calling write-class tools like autoform_fill_batch_acroform have been implicated in these attack patterns. Read the full case and prevention policy for each:

Browse the full MCP Attack Database →

Other tools in the Write risk category across the catalogue. The same policy patterns (rate-limit, validate) apply to each.

What does the autoform_fill_batch_acroform tool do? +

Genera MULTIPLES PDFs a partir de un PDF con campos AcroForm (formulario interactivo) + array de datos. Una sola llamada genera N documentos. CUANDO USAR: El PDF base tiene campos AcroForm (detectados con autoform_detect_fields) y el usuario quiere llenarlos con datos de varias personas/filas. Escalable a cientos de documentos en una sola llamada. NO USAR SI: El PDF es estatico (sin AcroForm) → usa autoform_fill_batch_at_coordinates. NO USAR SI: Solo necesitas llenar UN documento → usa autoform_fill_pdf. IMPORTANTE sobre nombres de campos: - Los campos AcroForm tienen nombres TECNICOS (ej: "Text1", "fld_nombre", "field_001") que NO siempre coinciden con los labels visibles del PDF. - DESPUES de llamar autoform_detect_fields, DEBES MIRAR EL PDF VISUALMENTE para correlacionar cada campo tecnico con su label visible segun sus coordenadas. - Si las claves de tus data_rows NO coinciden con los nombres tecnicos, usa el parametro field_map para traducir: { "nombre_logico": "nombre_tecnico" } - Ejemplo: si el campo tecnico es "Text1" pero visualmente corresponde al label "Nombre:", pasa field_map={"nombre": "Text1"} y data_rows=[{"nombre": "Juan"}] MERGE: Si merge_into_single=true, se genera SOLO el PDF unificado. CODIFICACION: Acentos (á é í ó ú ñ) soportados completamente. NO simplifiques caracteres. DIRECTORIO DE SALIDA: Si no se especifica output_dir, usa el MISMO directorio donde esta el pdf_path original. NO GENERES PDF DE PRUEBA: Genera el batch completo directamente. No hagas un "test" individual primero a menos que el usuario lo pida. VERIFICACION: Si el usuario adjunto el PDF al chat Y dio la ruta, aprovecha la imagen visual para verificar que los inferred_labels son correctos.. It is categorised as a Write tool in the Autoform MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on autoform_fill_batch_acroform? +

Add a rule in your Intercept YAML policy under the tools section for autoform_fill_batch_acroform. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the Autoform MCP server.

What risk level is autoform_fill_batch_acroform? +

autoform_fill_batch_acroform is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit autoform_fill_batch_acroform? +

Yes. Add a rate_limit block to the autoform_fill_batch_acroform rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block autoform_fill_batch_acroform completely? +

Set action: deny in the Intercept policy for autoform_fill_batch_acroform. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides autoform_fill_batch_acroform? +

autoform_fill_batch_acroform is provided by the Autoform MCP server (autoform-mcp-server). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Let agents act without letting them run wild.

Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.