send_test_submission

SERVERFormpaste SOURCEformpaste-mcp

Medium RISK CLASS

Category Write

Parameters 21 required

Recommended Rate-limitedsee the rule below

Registry record Grade C, identity unverified Pull the record →

This record as markdown: /tools/com-formpaste-formpaste/send-test-submission.md

WHAT IT DOES

What send_test_submission does on Formpaste

AI agents use send_test_submission to create or update resources in Formpaste, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Formpaste environment.

Parameter	Type	Required	Description
`fields`	object	—	Optional sample form fields as a flat string map, e.g. { name, email, message }. Omit to use a default test payload.
`formId`	string	Yes	A form id from create_form or list_forms, e.g. frm_...

Parameters from the server's own tool schema.

RISK

Why send_test_submission is rated Medium

This tool creates test submission records in a form system, which is a Write operation. It is reversible (limited to 5 rows per form, clearly marked as test data) and has minimal side effects (no email sending, no spam scoring, no quota impact). The scope is intentionally limited to non-production testing, making this low severity.

From the tool's definition Tool description states 'Store a TEST submission' and 'Stored only: it appears in the owner's Inbox with a Test badge'. The word 'Store' indicates data creation/modification.

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs send_test_submission safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Formpaste, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For send_test_submission, this is the rule to start with:

send_test_submission Rate-limited

send_test_submission stays usable, but capped: an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "send_test_submission": {
      "limits": [
        {
          "counter": "send_test_submission_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Formpaste, apply this rule, and every send_test_submission call is checked against it from then on.

FAQ

Questions about send_test_submission

What does the send_test_submission tool do? +

Store a TEST submission so you can prove a form is live and receiving. Stored only: it appears in the owner's Inbox with a Test badge but sends NO email, runs NO spam scoring, and never counts toward quota. Optionally pass sample fields; omit to use a default payload. Capped at the 5 newest test rows per form. Errors with: unauthorized, not_found, invalid_input, too_many_fields, field_too_large. It is categorised as a Write tool in the Formpaste MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

What parameters does send_test_submission accept? +

send_test_submission accepts 2 parameters: fields, formId. Required: formId. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on send_test_submission? +

Register the Formpaste MCP server in PolicyLayer and add a rule for send_test_submission: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Formpaste. Nothing to install.

What risk level is send_test_submission? +

send_test_submission is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit send_test_submission? +

Yes. Add a rate_limit block to the send_test_submission rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block send_test_submission completely? +

Set action: deny in the PolicyLayer policy for send_test_submission. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides send_test_submission? +

send_test_submission is provided by the Formpaste MCP server (formpaste-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Formpaste, and thousands of servers like it.

This server

All 6 Formpaste tools →

Across the catalogue

sms_send on Twilio SMS MCP Server →send-draft on Meme MCP Server → The MCP Attack Database →

Guides

Govern customer-ops agents →Argument validation →Scoped token →