transkribus_coll_user_update_role

What transkribus_coll_user_update_role does on Transkribus

AI agents use transkribus_coll_user_update_role to create or update resources in Transkribus, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Transkribus environment.

Why transkribus_coll_user_update_role is rated Medium

Updating a user's role changes access control and permissions within a collection. This is a Write operation because it modifies data (user role assignment) reversibly and does not delete data or execute arbitrary code. Severity is medium because malicious role changes could grant unauthorized access to sensitive documents or restrict legitimate users, but the change can be undone by an administrator.

From the tool's definition Tool name contains 'update_role' and description states 'Update the role of a user in a collection' — this modifies user permissions/roles in a collection, which is a reversible data modification operation.

The rule that runs transkribus_coll_user_update_role safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Transkribus, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For transkribus_coll_user_update_role, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "transkribus_coll_user_update_role": {
      "limits": [
        {
          "counter": "transkribus_coll_user_update_role_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about transkribus_coll_user_update_role