kg_update_entity

What kg_update_entity does on CoWork OS

AI agents use kg_update_entity to create or update resources in CoWork OS, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your CoWork OS environment.

Why kg_update_entity is rated Medium

This tool modifies existing data within what appears to be a knowledge graph (kg_*). Updates are reversible operations that create new states but do not permanently erase information. In a personal agentic OS context, an AI agent misusing this could modify incorrect entities, corrupt knowledge structures, or pollute the knowledge base, but the impact remains reversible.

From the tool's definition Tool name 'kg_update_entity' with description 'Update an existing entity' clearly indicates modification of data. The verb 'Update' and lack of irreversibility language (no 'delete', 'drop', 'purge') classify this as Write rather than Destructive.

The rule that runs kg_update_entity safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CoWork OS, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For kg_update_entity, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "kg_update_entity": {
      "limits": [
        {
          "counter": "kg_update_entity_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about kg_update_entity