claudeus_wp_content__create_block

What claudeus_wp_content__create_block does on Claudeus WordPress MCP

AI agents use claudeus_wp_content__create_block to create or update resources in Claudeus WordPress MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Claudeus WordPress MCP environment.

Why claudeus_wp_content__create_block is rated Medium

Creating a reusable block is a write operation—it adds new content/structure to the WordPress site. While reversible (blocks can be deleted), it could be misused by an AI agent to inject unwanted content, modify site layout, or create blocks with malicious markup. Medium severity reflects the potential for content injection attacks, but it's not destructive (can be undone) nor financial.

From the tool's definition Tool name contains 'create' and description states 'Create a new reusable block'. This is a content creation operation that modifies site data (adds a new block to WordPress) reversibly.

The rule that runs claudeus_wp_content__create_block safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Claudeus WordPress MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For claudeus_wp_content__create_block, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "claudeus_wp_content__create_block": {
      "limits": [
        {
          "counter": "claudeus_wp_content__create_block_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about claudeus_wp_content__create_block