Medium Risk

autoform_generate_batch

Genera MULTIPLES PDFs usando un TEMPLATE GUARDADO + datos. CUANDO USAR: Ya tienes un template guardado (via autoform_import_template o autoform_save_coordinates_as_template) y quieres generar muchos documentos. NO USAR SI: No tienes template guardado → usa autoform_fill_batch_at_coordinates (no ...

Part of the Autoform MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.

AI agents use autoform_generate_batch to create or modify resources in Autoform. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call autoform_generate_batch repeatedly, creating or modifying resources faster than any human could review. Intercept's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach Autoform.

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

autoform.yaml
tools:
  autoform_generate_batch:
    rules:
      - action: allow
        rate_limit:
          max: 30
          window: 60

See the full Autoform policy for all 11 tools.

Tool Name autoform_generate_batch
Category Write
MCP Server Autoform MCP Server
Risk Level Medium

View all 11 tools →

Agents calling write-class tools like autoform_generate_batch have been implicated in these attack patterns. Read the full case and prevention policy for each:

Browse the full MCP Attack Database →

Other tools in the Write risk category across the catalogue. The same policy patterns (rate-limit, validate) apply to each.

What does the autoform_generate_batch tool do? +

Genera MULTIPLES PDFs usando un TEMPLATE GUARDADO + datos. CUANDO USAR: Ya tienes un template guardado (via autoform_import_template o autoform_save_coordinates_as_template) y quieres generar muchos documentos. NO USAR SI: No tienes template guardado → usa autoform_fill_batch_at_coordinates (no requiere template). DATOS: Pasa los datos como array de objetos JSON en el parametro "data". Si el usuario tiene un archivo (Excel, CSV, etc.), leelo primero y convierte a JSON. CHECKBOXES MUTUAMENTE EXCLUYENTES: - Si el template tiene campos tipo checkbox (ej: es_alumno, es_docente, es_administrativo) donde SOLO UNO debe marcarse por documento, asegurate de que CADA fila de data tenga "X" en EXACTAMENTE UN campo de checkbox y "" (string vacio) en todos los demas. - NUNCA pongas "X" en multiples checkboxes de la misma fila. - Si un error produce checkboxes mal marcados, el error esta en tus datos, NO en el MCP. Revisa y corrige los datos antes de culpar al sistema. DIRECTORIO DE SALIDA: Si no se especifica output_dir, guarda en el mismo directorio del PDF base del template. NO GENERES PDF DE PRUEBA: Genera el batch completo directamente. Modos de distribucion (DEFAULT: "repeat"): - "repeat" (DEFAULT, recomendado para la mayoria de formularios): cada fila de datos genera UN documento completo. Todos los campos del template reciben sus valores de ESA fila. Usa este modo siempre que cada campo del template tenga un nombre UNICO (formularios normales, certificados, constancias). - "sequential": SOLO usar cuando el template tiene campos REPETIDOS con el mismo nombre (ej: una tabla con 10 campos "nombre" donde cada uno debe llenarse con una fila diferente). Si no estas seguro, usa "repeat". REGLA SIMPLE: si cada campo del template aparece solo 1 vez → "repeat". Si hay campos repetidos con el mismo fieldName → "sequential".. It is categorised as a Write tool in the Autoform MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on autoform_generate_batch? +

Add a rule in your Intercept YAML policy under the tools section for autoform_generate_batch. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the Autoform MCP server.

What risk level is autoform_generate_batch? +

autoform_generate_batch is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit autoform_generate_batch? +

Yes. Add a rate_limit block to the autoform_generate_batch rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block autoform_generate_batch completely? +

Set action: deny in the Intercept policy for autoform_generate_batch. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides autoform_generate_batch? +

autoform_generate_batch is provided by the Autoform MCP server (autoform-mcp-server). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Let agents act without letting them run wild.

Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.