# Update_Group

A write tool on the Files Com MCP server.

Agent View of the PolicyLayer registry record for `Update_Group`. HTML page: https://policylayer.com/tools/com-files-python-mcp/update-group

## Facts

- Tool: `Update_Group`
- Server: Files Com (`files-com-mcp`) — https://policylayer.com/tools/com-files-python-mcp.md
- Install: `npx -y files-com-mcp`
- Homepage: https://github.com/Files-com/files-mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "Update_Group",
    "arguments": {}
  }
}
```

## Why Update_Group is rated Medium

This tool modifies group configuration or metadata within Files.com. As an update operation, it creates reversible changes to existing resources. The severity is medium because unauthorized group modifications could affect access controls and user permissions, but the changes are not destructive (can be reverted) and do not directly move money or execute arbitrary code.

From the tool's own definition: "Tool name is 'Update_Group' and description states 'Update Group'. Update operations modify existing data reversibly."

## Use case

AI agents use Update_Group to create or update resources in Files Com, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Files Com environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Files Com:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "Update_Group": {
      "limits": [
        {
          "counter": "update_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Files Com (67)

- `Delete_Bundle` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle.md
- `Delete_Bundle_Notification` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle-notification.md
- `Delete_File` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-file.md
- `Delete_Group` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-group.md
- `Delete_Permission` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-permission.md
- `Delete_User` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-user.md
- `Transform_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/transform-file.md
- `Unzip_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/unzip-file.md
- `Check_Platform_Status` — Read — https://policylayer.com/tools/com-files-python-mcp/check-platform-status.md
- `Download_File_to_Local` — Read — https://policylayer.com/tools/com-files-python-mcp/download-file-to-local.md
- `Find_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/find-automation.md
- `Find_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle.md
- `Find_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle-notification.md
- `Find_File` — Read — https://policylayer.com/tools/com-files-python-mcp/find-file.md
- `Find_Group` — Read — https://policylayer.com/tools/com-files-python-mcp/find-group.md
- `Find_Remote_Server` — Read — https://policylayer.com/tools/com-files-python-mcp/find-remote-server.md
- `Find_User` — Read — https://policylayer.com/tools/com-files-python-mcp/find-user.md
- `Hello_World` — Read — https://policylayer.com/tools/com-files-python-mcp/hello-world.md
- `List_Action_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-action-log.md
- `List_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-api-request-log.md
- `List_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation.md
- `List_Automation_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation-log.md
- `List_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle.md
- `List_Bundle_Download` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-download.md
- `List_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-notification.md
- `List_Bundle_Recipient` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-recipient.md
- `List_Bundle_Registration` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-registration.md
- `List_Email_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-email-log.md
- `List_Exavault_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-exavault-api-request-log.md
- `List_External_Event` — Read — https://policylayer.com/tools/com-files-python-mcp/list-external-event.md
- …and 37 more: https://policylayer.com/tools/com-files-python-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-files-python-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-files-python-mcp
