Create_Bundle_Recipient

What Create_Bundle_Recipient does on Files Com

AI agents use Create_Bundle_Recipient to create or update resources in Files Com, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Files Com environment.

Why Create_Bundle_Recipient is rated Medium

This tool creates a new recipient entry for a share link, which modifies data in the Files.com environment by adding access grants. It is reversible (recipients can be removed), making it Write rather than Destructive. The severity is high because improper use could grant unintended file access to unauthorized parties, potentially exposing sensitive data depending on what bundle is being shared.

From the tool's definition Tool name is 'Create_Bundle_Recipient' and description states 'Create Share Link Recipient'. The verb 'Create' indicates this tool adds a new recipient to a share link bundle, which is a reversible data modification.

The rule that runs Create_Bundle_Recipient safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Files Com, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For Create_Bundle_Recipient, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "Create_Bundle_Recipient": {
      "limits": [
        {
          "counter": "create_bundle_recipient_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about Create_Bundle_Recipient