Medium Risk

hwp_create_document_from_text

단일 문자열로 된 텍스트 내용으로 문서를 생성합니다. Args: content (str): 문서 내용 (형식을 자동으로 감지하고 처리) title (str, optional): 문서 제목. 없으면 첫 줄을 제목으로 사용. format_content (bool): 내용 자동 포맷팅 여부 (줄바꿈, 문단 구분 등) save_filename (str, optional): 저장할 파일 이름. 제공되지 않으면 저장하지 않음. preserve_linebreaks (bool): 줄바꿈 유지 여부. True이면 원본 텍스트의 모든 줄바꿈 유...

How to control hwp_create_document_from_text ↓

What hwp_create_document_from_text does on HWP MCP Server

AI agents use hwp_create_document_from_text to create or update resources in HWP MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your HWP MCP Server environment.

Medium Risk

Why hwp_create_document_from_text needs a policy

This tool creates new HWP documents and optionally saves them to disk. Document creation is a Write operation—it modifies the system state by instantiating new files, but the action is reversible (files can be deleted). It does not execute arbitrary code, delete existing data, or move money.

From the tool's definition The tool description states it "생성합니다" (creates) a document from text content with parameters like `save_filename` that persist the document to disk. It includes reversible document creation and optional file writing operations.

Documented attack patterns abuse exactly the kind of access hwp_create_document_from_text gives an agent:

How to control hwp_create_document_from_text

PolicyLayer is an MCP gateway — it sits between your AI agents and HWP MCP Server, and nothing reaches the server without passing your rules. This is the rule we recommend for hwp_create_document_from_text:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "hwp_create_document_from_text": {
      "limits": [
        {
          "counter": "hwp_create_document_from_text_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

hwp_create_document_from_text stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register HWP MCP Server — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about hwp_create_document_from_text

What does the hwp_create_document_from_text tool do? +

단일 문자열로 된 텍스트 내용으로 문서를 생성합니다. Args: content (str): 문서 내용 (형식을 자동으로 감지하고 처리) title (str, optional): 문서 제목. 없으면 첫 줄을 제목으로 사용. format_content (bool): 내용 자동 포맷팅 여부 (줄바꿈, 문단 구분 등) save_filename (str, optional): 저장할 파일 이름. 제공되지 않으면 저장하지 않음. preserve_linebreaks (bool): 줄바꿈 유지 여부. True이면 원본 텍스트의 모든 줄바꿈 유지. Returns: dict: 문서 생성 결과. It is categorised as a Write tool in the HWP MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on hwp_create_document_from_text? +

Register the HWP MCP Server MCP server in PolicyLayer and add a rule for hwp_create_document_from_text: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches HWP MCP Server. Nothing to install.

What risk level is hwp_create_document_from_text? +

hwp_create_document_from_text is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit hwp_create_document_from_text? +

Yes. Add a rate_limit block to the hwp_create_document_from_text rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block hwp_create_document_from_text completely? +

Set action: deny in the PolicyLayer policy for hwp_create_document_from_text. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides hwp_create_document_from_text? +

hwp_create_document_from_text is provided by the HWP MCP Server MCP server (jkf87/hwp-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every HWP MCP Server tool call.

Start from HWP MCP Server, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

30 HWP MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.