update_tool

What update_tool does on Mealie MCP Server

AI agents use update_tool to create or update resources in Mealie MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mealie MCP Server environment.

Why update_tool is rated Medium

The tool creates or modifies data reversibly without deleting or executing external code. Severity is medium because renaming a recipe tool has limited blast radius—it affects metadata only and is easily reversible, but could cause confusion if an agent renames tools maliciously or inappropriately. Confidence is high given the explicit 'update' verb and clear modification intent in the description.

From the tool's definition Tool description states 'Update a recipe tool's name' — this modifies existing data (the tool's name) in a reversible manner. The verb 'update' and the action of changing metadata (name) are characteristic of Write-category operations.

The rule that runs update_tool safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mealie MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_tool, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_tool": {
      "limits": [
        {
          "counter": "update_tool_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_tool