create_prefab

What create_prefab does on Cocos

AI agents use create_prefab to create or update resources in Cocos, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Cocos environment.

Why create_prefab is rated Medium

Creating a prefab is a reversible write operation that adds new data to the Cocos Creator project. While it modifies project state, it does not execute arbitrary code, delete data irreversibly, or move financial resources. The severity is medium because prefab creation could clutter the project or overwrite existing assets if naming conflicts occur, but the primary effect is additive rather than destructive.

From the tool's definition Tool name 'create_prefab' and description 'Create a prefab from a node with all children and components' indicate creation of a new reusable game object asset. This is a write operation that modifies the project by creating new data (prefab asset).

The rule that runs create_prefab safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cocos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_prefab, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_prefab": {
      "limits": [
        {
          "counter": "create_prefab_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_prefab