# save_mailbox PARTIAL SAVE: writes ONLY the 'Mailbox' field of TitlePublicConfigurationModel; all other v1/v2 fields stay untouched. Mailbox - an in-game mailbox that holds VALUE the player claims (not notifications - those are Push). Enabled is the master switch, default OFF. Capacity (default 100) caps visible letters; on overflow the oldest letters WITHOUT unclaimed rewards are removed. RewardLetterDays (30) / PlainLetterDays (14) are letter lifetimes (an unclaimed reward is lost when it expires), ClaimedRetentionDays (7) keeps claimed letters visible. DefaultLanguage (en) is the text fallback. Templates maps a TemplateID to per-language Texts {Subject, Body with {Param} placeholders}, Category (System/Reward/Gift/Social tab), Icon, Banner, Link {FeatureID+Args to open a game screen, or an https Url}, SenderName, ExpirationDays; keys 'system.*' override built-in letters of modules (system.gift, system.transfer, system.transfer_return, system.leaderboard_reward, system.coop_grand_prize, system.coop_object_reward, system.season_unclaimed, system.referral_reward). Gifts.Social maps a GiftID to a friend gift (Grant of items/virtual currencies minted on claim; optional Cost the sender pays per friend, burned; one per friend per period; the period is IntervalSeconds (default 86400) counted from AnchorUtc (default 2026-01-01 00:00 UTC) like fixed-interval cycles of other systems; SendLimit/ReceiveLimit per period, default 20; SenderGate). Gifts.Transfer lets friends send their OWN resources: AllowedResources whitelist (VirtualCurrency or STACKABLE items; MaxAmountPerGift is a CAP - any amount from 1 up to it, entries separately or together), MaxEntriesPerGift (5), IntervalSeconds/AnchorUtc (same period model), SendLimit/ReceiveLimit per period (5), FeePercent (0-90, withheld from what the friend receives, the fee per entry rounds up) and FeeCost (fixed fee on top); both burn only when the friend claims - a declined or expired transfer returns everything charged, MinFriendshipHours (24, against alt-account funnelling), ExpirationDays (7, then returned to the sender). Integrations {Leaderboard, CoopEvent, Season, Referral} (empty = on) bring unclaimed rewards of those modules to the mailbox. Letters and broadcasts themselves are NOT config: they are sent from the dashboard (player letters, segment broadcasts with a SegmentGate and a schedule) or by CloudCode server.SendMail; letters with rewards require the player-admin plan right. Agent View of the PolicyLayer registry record for `save_mailbox`. HTML page: https://policylayer.com/tools/com-idosgames-platform/save-mailbox ## Facts - Tool: `save_mailbox` - Server: iDos Games (`https://site.idosgames.com/api/v2/mcp`) — https://policylayer.com/tools/com-idosgames-platform.md - Homepage: https://github.com/iDos-Games/idosgames-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server CORS policy: * - Server rate-limited: no - Parameters: 2 (2 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `value` | object | yes | Title mailbox: letters with rewards, publisher broadcasts, friend gifts and unclaimed rewards of other modules. An in-game mailbox that holds VALUE the player c | | `title_id` | string | yes | TitleID, для которого сохраняются данные. | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "save_mailbox", "arguments": { "value": {}, "title_id": "" } } } ``` ## Why save_mailbox is rated Medium An AI agent can call save_mailbox faster than any human can review: one bad instruction and it creates or modifies resources in iDos Games by the hundred, each call as confident as the last. Risk signals: High parameter count (11 properties) · Bulk/mass operation — affects multiple targets · Admin/system-level operation ## Use case AI agents use save_mailbox to create or update resources in iDos Games, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your iDos Games environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches iDos Games: ```json { "version": "1", "default": "deny", "tools": { "save_mailbox": { "limits": [ { "counter": "save_mailbox_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on iDos Games (158) - `delete_kanban_card` — Destructive — https://policylayer.com/tools/com-idosgames-platform/delete-kanban-card.md - `delete_kanban_column` — Destructive — https://policylayer.com/tools/com-idosgames-platform/delete-kanban-column.md - `delete_kanban_project` — Destructive — https://policylayer.com/tools/com-idosgames-platform/delete-kanban-project.md - `get_push` — Destructive — https://policylayer.com/tools/com-idosgames-platform/get-push.md - `get_usage` — Destructive — https://policylayer.com/tools/com-idosgames-platform/get-usage.md - `save_push` — Destructive — https://policylayer.com/tools/com-idosgames-platform/save-push.md - `save_usage` — Destructive — https://policylayer.com/tools/com-idosgames-platform/save-usage.md - `begin_build_upload` — Execute — https://policylayer.com/tools/com-idosgames-platform/begin-build-upload.md - `finish_build_upload` — Execute — https://policylayer.com/tools/com-idosgames-platform/finish-build-upload.md - `draft_social_reply` — Read — https://policylayer.com/tools/com-idosgames-platform/draft-social-reply.md - `estimate_media_cost` — Read — https://policylayer.com/tools/com-idosgames-platform/estimate-media-cost.md - `get_advertising` — Read — https://policylayer.com/tools/com-idosgames-platform/get-advertising.md - `get_ai` — Read — https://policylayer.com/tools/com-idosgames-platform/get-ai.md - `get_analytics` — Read — https://policylayer.com/tools/com-idosgames-platform/get-analytics.md - `get_asset_bundle` — Read — https://policylayer.com/tools/com-idosgames-platform/get-asset-bundle.md - `get_attribution` — Read — https://policylayer.com/tools/com-idosgames-platform/get-attribution.md - `get_authentication` — Read — https://policylayer.com/tools/com-idosgames-platform/get-authentication.md - `get_ban` — Read — https://policylayer.com/tools/com-idosgames-platform/get-ban.md - `get_blockchain` — Read — https://policylayer.com/tools/com-idosgames-platform/get-blockchain.md - `get_build` — Read — https://policylayer.com/tools/com-idosgames-platform/get-build.md - `get_character` — Read — https://policylayer.com/tools/com-idosgames-platform/get-character.md - `get_chat` — Read — https://policylayer.com/tools/com-idosgames-platform/get-chat.md - `get_cloud_code` — Read — https://policylayer.com/tools/com-idosgames-platform/get-cloud-code.md - `get_collection` — Read — https://policylayer.com/tools/com-idosgames-platform/get-collection.md - `get_community_marketing` — Read — https://policylayer.com/tools/com-idosgames-platform/get-community-marketing.md - `get_coop_event` — Read — https://policylayer.com/tools/com-idosgames-platform/get-coop-event.md - `get_craft` — Read — https://policylayer.com/tools/com-idosgames-platform/get-craft.md - `get_currency` — Read — https://policylayer.com/tools/com-idosgames-platform/get-currency.md - `get_data_collections` — Read — https://policylayer.com/tools/com-idosgames-platform/get-data-collections.md - `get_deal_offer` — Read — https://policylayer.com/tools/com-idosgames-platform/get-deal-offer.md - …and 128 more: https://policylayer.com/tools/com-idosgames-platform.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-idosgames-platform · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-idosgames-platform