# claudeus_wp_theme__update_custom_css Update theme custom CSS Agent View of the PolicyLayer registry record for `claudeus_wp_theme__update_custom_css`. HTML page: https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-theme--update-custom-css ## Facts - Tool: `claudeus_wp_theme__update_custom_css` - Server: Claudeus WordPress MCP (`deus-h/claudeus-wp-mcp`) — https://policylayer.com/tools/deus-h-claudeus-wp-mcp.md - Homepage: https://github.com/deus-h/claudeus-wp-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "claudeus_wp_theme__update_custom_css", "arguments": {} } } ``` ## Why claudeus_wp_theme__update_custom_css is rated Medium Updating custom CSS is a reversible modification (Write category) rather than deletion or code execution. However, severity is high because malicious CSS can deface the site, inject JavaScript via content, hide content, or redirect users—affecting all site visitors. From the tool's own definition: "Tool name 'update_custom_css' and description 'Update theme custom CSS' indicate modification of theme styling code. This is a write operation that alters site appearance and functionality through CSS injection." ## Use case AI agents use claudeus_wp_theme__update_custom_css to create or update resources in Claudeus WordPress MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Claudeus WordPress MCP environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Claudeus WordPress MCP: ```json { "version": "1", "default": "deny", "tools": { "claudeus_wp_theme__update_custom_css": { "limits": [ { "counter": "claudeus_wp_theme__update_custom_css_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Claudeus WordPress MCP (144) - `claudeus_wp_astra__delete_custom_layout` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--delete-custom-layout.md - `claudeus_wp_comments__delete_comment` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--delete-comment.md - `claudeus_wp_comments__spam` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--spam.md - `claudeus_wp_comments__trash` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--trash.md - `claudeus_wp_content__delete_block` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-block.md - `claudeus_wp_content__delete_block_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-block-revision.md - `claudeus_wp_content__delete_page` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-page.md - `claudeus_wp_content__delete_page_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-page-revision.md - `claudeus_wp_content__delete_post` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-post.md - `claudeus_wp_content__delete_post_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-post-revision.md - `claudeus_wp_media__delete` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-media--delete.md - `claudeus_wp_menus__delete_menu` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-menus--delete-menu.md - `claudeus_wp_menus__delete_menu_item` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-menus--delete-menu-item.md - `claudeus_wp_plugins__delete` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-plugins--delete.md - `claudeus_wp_taxonomy__delete_category` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-taxonomy--delete-category.md - `claudeus_wp_taxonomy__delete_tag` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-taxonomy--delete-tag.md - `claudeus_wp_templates__delete_template` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-templates--delete-template.md - `claudeus_wp_templates__delete_template_part` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-templates--delete-template-part.md - `claudeus_wp_users__delete_user` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-users--delete-user.md - `claudeus_wp_users__revoke_app_password` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-users--revoke-app-password.md - `claudeus_wp_widgets__delete_widget` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-widgets--delete-widget.md - `claudeus_wp_health__run_all_tests` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-health--run-all-tests.md - `claudeus_wp_health__test_loopback` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-health--test-loopback.md - `claudeus_wp_plugins__activate` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-plugins--activate.md - `claudeus_wp_astra__get_custom_layout` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-custom-layout.md - `claudeus_wp_astra__get_custom_layouts` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-custom-layouts.md - `claudeus_wp_astra__get_mega_menu` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-mega-menu.md - `claudeus_wp_astra__get_settings` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-settings.md - `claudeus_wp_comments__get_comment` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--get-comment.md - `claudeus_wp_comments__get_comments` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--get-comments.md - …and 114 more: https://policylayer.com/tools/deus-h-claudeus-wp-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=deus-h-claudeus-wp-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/deus-h-claudeus-wp-mcp