# Create_Bundle_Recipient Create Share Link Recipient Agent View of the PolicyLayer registry record for `Create_Bundle_Recipient`. HTML page: https://policylayer.com/tools/com-files-python-mcp/create-bundle-recipient ## Facts - Tool: `Create_Bundle_Recipient` - Server: Files Com (`files-com-mcp`) — https://policylayer.com/tools/com-files-python-mcp.md - Install: `npx -y files-com-mcp` - Homepage: https://github.com/Files-com/files-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "Create_Bundle_Recipient", "arguments": {} } } ``` ## Why Create_Bundle_Recipient is rated Medium This tool creates a new recipient entry for a share link, which modifies data in the Files.com environment by adding access grants. It is reversible (recipients can be removed), making it Write rather than Destructive. The severity is high because improper use could grant unintended file access to unauthorized parties, potentially exposing sensitive data depending on what bundle is being shared. From the tool's own definition: "Tool name is 'Create_Bundle_Recipient' and description states 'Create Share Link Recipient'. The verb 'Create' indicates this tool adds a new recipient to a share link bundle, which is a reversible data modification." ## Use case AI agents use Create_Bundle_Recipient to create or update resources in Files Com, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Files Com environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Files Com: ```json { "version": "1", "default": "deny", "tools": { "Create_Bundle_Recipient": { "limits": [ { "counter": "create_bundle_recipient_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Files Com (67) - `Delete_Bundle` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle.md - `Delete_Bundle_Notification` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle-notification.md - `Delete_File` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-file.md - `Delete_Group` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-group.md - `Delete_Permission` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-permission.md - `Delete_User` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-user.md - `Transform_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/transform-file.md - `Unzip_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/unzip-file.md - `Check_Platform_Status` — Read — https://policylayer.com/tools/com-files-python-mcp/check-platform-status.md - `Download_File_to_Local` — Read — https://policylayer.com/tools/com-files-python-mcp/download-file-to-local.md - `Find_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/find-automation.md - `Find_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle.md - `Find_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle-notification.md - `Find_File` — Read — https://policylayer.com/tools/com-files-python-mcp/find-file.md - `Find_Group` — Read — https://policylayer.com/tools/com-files-python-mcp/find-group.md - `Find_Remote_Server` — Read — https://policylayer.com/tools/com-files-python-mcp/find-remote-server.md - `Find_User` — Read — https://policylayer.com/tools/com-files-python-mcp/find-user.md - `Hello_World` — Read — https://policylayer.com/tools/com-files-python-mcp/hello-world.md - `List_Action_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-action-log.md - `List_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-api-request-log.md - `List_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation.md - `List_Automation_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation-log.md - `List_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle.md - `List_Bundle_Download` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-download.md - `List_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-notification.md - `List_Bundle_Recipient` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-recipient.md - `List_Bundle_Registration` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-registration.md - `List_Email_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-email-log.md - `List_Exavault_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-exavault-api-request-log.md - `List_External_Event` — Read — https://policylayer.com/tools/com-files-python-mcp/list-external-event.md - …and 37 more: https://policylayer.com/tools/com-files-python-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-files-python-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-files-python-mcp