# create_list_item

Create a new item in a SharePoint list.

Agent View of the PolicyLayer registry record for `create_list_item`. HTML page: https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-list-item

## Facts

- Tool: `create_list_item`
- Server: Sharepoint (`demodorigatsuo/sharepoint-mcp`) — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp.md
- Homepage: https://github.com/DEmodoriGatsuO/sharepoint-mcp
- Risk category: Write (Medium risk)
- Registry record: grade D, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_list_item",
    "arguments": {}
  }
}
```

## Why create_list_item is rated Medium

This tool creates new records in a SharePoint list, which is a reversible write operation. It does not delete, execute code, or transfer funds. The severity is medium because unauthorized item creation could pollute business data and affect downstream processes, but the impact is typically contained to a single list and reversible through deletion.

From the tool's own definition: "Tool name 'create_list_item' and description 'Create a new item in a SharePoint list' explicitly indicate data creation that modifies list state."

## Use case

AI agents use create_list_item to create or update resources in Sharepoint, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Sharepoint environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Sharepoint:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_list_item": {
      "limits": [
        {
          "counter": "create_list_item_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Sharepoint (17)

- `download_file` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/download-file.md
- `get_document_by_path` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-document-by-path.md
- `get_document_content` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-document-content.md
- `get_item_metadata` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-item-metadata.md
- `get_list_items` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-list-items.md
- `get_lists` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-lists.md
- `get_site_info` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/get-site-info.md
- `list_document_libraries` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/list-document-libraries.md
- `list_folder_contents` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/list-folder-contents.md
- `search_sharepoint` — Read — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/search-sharepoint.md
- `create_advanced_document_library` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-advanced-document-library.md
- `create_intelligent_list` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-intelligent-list.md
- `create_modern_page` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-modern-page.md
- `create_news_post` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-news-post.md
- `create_sharepoint_site` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/create-sharepoint-site.md
- `update_list_item` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/update-list-item.md
- `upload_document` — Write — https://policylayer.com/tools/demodorigatsuo-sharepoint-mcp/upload-document.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=demodorigatsuo-sharepoint-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/demodorigatsuo-sharepoint-mcp