# updatePenPath

A write tool on the Spline MCP Server MCP server.

Agent View of the PolicyLayer registry record for `updatePenPath`. HTML page: https://policylayer.com/tools/aydinfer-spline-mcp-server/updatepenpath

## Facts

- Tool: `updatePenPath`
- Server: Spline MCP Server (`aydinfer/spline-mcp-server`) — https://policylayer.com/tools/aydinfer-spline-mcp-server.md
- Homepage: https://github.com/aydinfer/spline-mcp-server
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "updatePenPath",
    "arguments": {}
  }
}
```

## Why updatePenPath is rated Medium

The 'update' verb combined with 'PenPath' (a design object in Spline) indicates reversible modification of existing path data. No deletion or code execution is implied. While the description is empty, the naming pattern and server context (3D design tool) strongly suggest this creates or modifies design elements rather than executing arbitrary commands or destroying data.

From the tool's own definition: "Tool name 'updatePenPath' suggests modifying a path object. The server description indicates operations like 'creating animations' and 'modifying' design elements."

## Use case

AI agents use updatePenPath to create or update resources in Spline MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Spline MCP Server environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Spline MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "updatePenPath": {
      "limits": [
        {
          "counter": "updatepenpath_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Spline MCP Server (144)

- `deleteAction` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deleteaction.md
- `deleteApi` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deleteapi.md
- `deleteMaterialLayer` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deletemateriallayer.md
- `deleteObject` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deleteobject.md
- `deleteSnapshot` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deletesnapshot.md
- `deleteWebhook` — Destructive — https://policylayer.com/tools/aydinfer-spline-mcp-server/deletewebhook.md
- `applyEffectorToCloner` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/applyeffectortocloner.md
- `applyForce` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/applyforce.md
- `applySculptingBrush` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/applysculptingbrush.md
- `applyTorque` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/applytorque.md
- `controlHanaAnimation` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/controlhanaanimation.md
- `controlParticleSystem` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/controlparticlesystem.md
- `controlPathAnimation` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/controlpathanimation.md
- `convertMeshToGaussianSplatting` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/convertmeshtogaussiansplatting.md
- `createGaussianSplattingFromImages` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/creategaussiansplattingfromimages.md
- `exportSceneCode` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/exportscenecode.md
- `generateAnimationCode` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/generateanimationcode.md
- `generateObjectCode` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/generateobjectcode.md
- `generateTextWithOpenAI` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/generatetextwithopenai.md
- `navigateBetweenScenes` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/navigatebetweenscenes.md
- `sendWebhookData` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/sendwebhookdata.md
- `triggerEvent` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/triggerevent.md
- `triggerHanaState` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/triggerhanastate.md
- `triggerState` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/triggerstate.md
- `triggerWebhook` — Execute — https://policylayer.com/tools/aydinfer-spline-mcp-server/triggerwebhook.md
- `configureApiRequestAction` — Other — https://policylayer.com/tools/aydinfer-spline-mcp-server/configureapirequestaction.md
- `configureConditionalAction` — Other — https://policylayer.com/tools/aydinfer-spline-mcp-server/configureconditionalaction.md
- `configureEventParameters` — Other — https://policylayer.com/tools/aydinfer-spline-mcp-server/configureeventparameters.md
- `createSnapshot` — Other — https://policylayer.com/tools/aydinfer-spline-mcp-server/createsnapshot.md
- `distributeAlongPath` — Other — https://policylayer.com/tools/aydinfer-spline-mcp-server/distributealongpath.md
- …and 114 more: https://policylayer.com/tools/aydinfer-spline-mcp-server.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=aydinfer-spline-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/aydinfer-spline-mcp-server