create_state

What create_state does on Plane

AI agents use create_state to create or update resources in Plane, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Plane environment.

Why create_state is rated Medium

Creating a workflow state is a reversible write operation that configures project management settings. It has no direct destructive impact, does not execute arbitrary code, and does not involve financial transactions. The blast radius is minimal as workflow states are metadata configurations that can be edited or removed by other tools. Severity is low because the impact is limited to project configuration scope.

From the tool's definition Tool name 'create_state' and description 'Create a new workflow state in a project' indicate creation of new configuration data. This is a reversible write operation that adds a workflow state without deleting or modifying existing data.

The rule that runs create_state safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_state, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_state": {
      "limits": [
        {
          "counter": "create_state_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_state