export_design

What export_design does on Ncp

AI agents call export_design to retrieve information from Ncp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why export_design is rated Low

Exporting a design is a read-like operation that produces a copy of existing data without modifying the source. However, depending on the export destination and permissions, it could expose sensitive design IP or trigger external file writes. Classified as Read since the primary action is retrieving/rendering existing data. Severity is medium because design exports can expose proprietary creative assets.

From the tool's definition 'Export Canva design' — exporting retrieves/serializes existing design data into a file format, with no indication of modification or deletion.

The rule that runs export_design safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For export_design, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "export_design": {}
  }
}

Questions about export_design