batch_write_agent_files

What batch_write_agent_files does on ProAgentStore

AI agents use batch_write_agent_files to create or update resources in ProAgentStore, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ProAgentStore environment.

Why batch_write_agent_files is rated Medium

This tool creates or modifies files within an owned agent, which is a Write operation. While it can overwrite existing files, the action is reversible and does not constitute permanent data destruction. The 'medium' severity reflects the potential blast radius if an agent mistakenly writes malicious or incorrect files to multiple agent systems, which could disrupt agent functionality.

From the tool's definition Tool name contains 'write' and description states 'Create or overwrite multiple files'. The action is reversible (files can be deleted or overwritten again), distinguishing it from 'Destructive' operations.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs batch_write_agent_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ProAgentStore, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For batch_write_agent_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "batch_write_agent_files": {
      "limits": [
        {
          "counter": "batch_write_agent_files_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about batch_write_agent_files