# Upload_File_from_Local

Upload a file to my Files.com site.

Agent View of the PolicyLayer registry record for `Upload_File_from_Local`. HTML page: https://policylayer.com/tools/com-files-python-mcp/upload-file-from-local

## Facts

- Tool: `Upload_File_from_Local`
- Server: Files Com (`files-com-mcp`) — https://policylayer.com/tools/com-files-python-mcp.md
- Install: `npx -y files-com-mcp`
- Homepage: https://github.com/Files-com/files-mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "Upload_File_from_Local",
    "arguments": {}
  }
}
```

## Why Upload_File_from_Local is rated Medium

This tool creates/modifies data (uploads files to Files.com) which is reversible (files can be deleted). It does not execute arbitrary code, delete data irreversibly, or move money. The 'high' severity reflects the blast radius: an AI agent could upload malicious files, overwrite legitimate files, exfiltrate data by uploading to attacker-controlled destinations, or exhaust storage quotas.

From the tool's own definition: "Tool name 'Upload_File_from_Local' and description 'Upload a file to my Files.com site' explicitly indicate creation of new file objects in a remote cloud storage system."

## Use case

AI agents use Upload_File_from_Local to create or update resources in Files Com, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Files Com environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Files Com:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "Upload_File_from_Local": {
      "limits": [
        {
          "counter": "upload_file_from_local_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Files Com (67)

- `Delete_Bundle` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle.md
- `Delete_Bundle_Notification` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-bundle-notification.md
- `Delete_File` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-file.md
- `Delete_Group` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-group.md
- `Delete_Permission` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-permission.md
- `Delete_User` — Destructive — https://policylayer.com/tools/com-files-python-mcp/delete-user.md
- `Transform_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/transform-file.md
- `Unzip_File` — Execute — https://policylayer.com/tools/com-files-python-mcp/unzip-file.md
- `Check_Platform_Status` — Read — https://policylayer.com/tools/com-files-python-mcp/check-platform-status.md
- `Download_File_to_Local` — Read — https://policylayer.com/tools/com-files-python-mcp/download-file-to-local.md
- `Find_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/find-automation.md
- `Find_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle.md
- `Find_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/find-bundle-notification.md
- `Find_File` — Read — https://policylayer.com/tools/com-files-python-mcp/find-file.md
- `Find_Group` — Read — https://policylayer.com/tools/com-files-python-mcp/find-group.md
- `Find_Remote_Server` — Read — https://policylayer.com/tools/com-files-python-mcp/find-remote-server.md
- `Find_User` — Read — https://policylayer.com/tools/com-files-python-mcp/find-user.md
- `Hello_World` — Read — https://policylayer.com/tools/com-files-python-mcp/hello-world.md
- `List_Action_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-action-log.md
- `List_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-api-request-log.md
- `List_Automation` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation.md
- `List_Automation_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-automation-log.md
- `List_Bundle` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle.md
- `List_Bundle_Download` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-download.md
- `List_Bundle_Notification` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-notification.md
- `List_Bundle_Recipient` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-recipient.md
- `List_Bundle_Registration` — Read — https://policylayer.com/tools/com-files-python-mcp/list-bundle-registration.md
- `List_Email_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-email-log.md
- `List_Exavault_Api_Request_Log` — Read — https://policylayer.com/tools/com-files-python-mcp/list-exavault-api-request-log.md
- `List_External_Event` — Read — https://policylayer.com/tools/com-files-python-mcp/list-external-event.md
- …and 37 more: https://policylayer.com/tools/com-files-python-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-files-python-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-files-python-mcp