# gluecron_write_file

Create or update a file on a branch via git plumbing. Wraps createOrUpdateFileOnBranch. Pass content as a UTF-8 string OR content_base64 for binary. Requires 'repo' scope.

Agent View of the PolicyLayer registry record for `gluecron_write_file`. HTML page: https://policylayer.com/tools/com-gluecron-gluecron/gluecron-write-file

## Facts

- Tool: `gluecron_write_file`
- Server: Gluecron (`https://gluecron.com/mcp`) — https://policylayer.com/tools/com-gluecron-gluecron.md
- Homepage: https://github.com/https://gluecron.com/mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: yes
- Parameters: 8 (5 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `path` | string | yes |  |
| `repo` | string | yes |  |
| `owner` | string | yes |  |
| `branch` | string | yes |  |
| `content` | string | no | UTF-8 file body (optional) |
| `message` | string | yes | Commit message |
| `content_base64` | string | no | Base64 file body (optional) |
| `expect_blob_sha` | string | no | Optimistic-concurrency check: existing blob sha must match. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "gluecron_write_file",
    "arguments": {
      "path": "<path>",
      "repo": "<repo>",
      "owner": "<owner>",
      "branch": "<branch>",
      "message": "<message>"
    }
  }
}
```

## Why gluecron_write_file is rated Medium

This tool modifies repository files in a reversible manner—files created or updated via git can be reverted, amended, or deleted in subsequent commits. While it can alter code and potentially introduce vulnerabilities, the changes are tracked by git and can be undone, distinguishing it from destructive operations.

From the tool's own definition: "Tool description explicitly states 'Create or update a file on a branch via git plumbing', using the verbs 'create' and 'update' which are reversible write operations. The tool accepts content as UTF-8 string or binary via base64 encoding."

Risk signals: Accepts file system path (path) · Accepts raw HTML/template content (content)

## Use case

AI agents use gluecron_write_file to create or update resources in Gluecron, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Gluecron environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Gluecron:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "gluecron_write_file": {
      "limits": [
        {
          "counter": "gluecron_write_file_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Gluecron (59)

- `gluecron_delete_file` — Destructive — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-delete-file.md
- `gluecron_delete_repo` — Destructive — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-delete-repo.md
- `gluecron_cancel_workflow_run` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-cancel-workflow-run.md
- `gluecron_generate_tests` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-tests.md
- `gluecron_merge_pr` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-merge-pr.md
- `gluecron_provision_pr_sandbox` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-provision-pr-sandbox.md
- `gluecron_refactor_across_repos` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-refactor-across-repos.md
- `gluecron_trigger_workflow` — Execute — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-trigger-workflow.md
- `gluecron_ai_cost_summary` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-ai-cost-summary.md
- `gluecron_clone_url` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-clone-url.md
- `gluecron_explain_repo` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-explain-repo.md
- `gluecron_find_symbol` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-find-symbol.md
- `gluecron_generate_commit_message` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-commit-message.md
- `gluecron_generate_release_notes` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-generate-release-notes.md
- `gluecron_get_agent_budget` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-agent-budget.md
- `gluecron_get_commit` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-commit.md
- `gluecron_get_pr` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-pr.md
- `gluecron_get_preview_url` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-preview-url.md
- `gluecron_get_workflow_logs` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-workflow-logs.md
- `gluecron_get_workflow_run` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-get-workflow-run.md
- `gluecron_list_prs` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-list-prs.md
- `gluecron_list_tree` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-list-tree.md
- `gluecron_pr_status_summary` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-pr-status-summary.md
- `gluecron_read_file` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-read-file.md
- `gluecron_repo_explain_codebase` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-explain-codebase.md
- `gluecron_repo_health` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-health.md
- `gluecron_repo_list_issues` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-list-issues.md
- `gluecron_repo_read_file` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-read-file.md
- `gluecron_repo_search` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-repo-search.md
- `gluecron_search_issues` — Read — https://policylayer.com/tools/com-gluecron-gluecron/gluecron-search-issues.md
- …and 29 more: https://policylayer.com/tools/com-gluecron-gluecron.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-gluecron-gluecron · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-gluecron-gluecron