Medium Risk

create_study

Creates a user interview study and returns an interview_link to share with participants. Starts with 1 interview slot. Optionally include study_media to show an image or Figma prototype during the interview.

How to control create_study ↓

What create_study does on Mcp Usercall

AI agents use create_study to create or update resources in Mcp Usercall — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcp Usercall environment.

Medium Risk

Why create_study needs a policy

The create_study tool creates new interview studies and generates shareable links, which are reversible write operations. While it initiates user research activities, these can be modified (via update_study) or deleted (via delete_study) based on the sibling tools, placing it in the Write category rather than Execute or Destructive.

From the tool's definition Tool description states it 'Creates a user interview study' and 'returns an interview_link to share with participants', indicating it creates new data structures and resources that persist in the system.

Documented attack patterns abuse exactly the kind of access create_study gives an agent:

How to control create_study

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Usercall, and nothing reaches the server without passing your rules. This is the rule we recommend for create_study:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_study": {
      "limits": [
        {
          "counter": "create_study_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

create_study stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Mcp Usercall — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about create_study

What does the create_study tool do? +

Creates a user interview study and returns an interview_link to share with participants. Starts with 1 interview slot. Optionally include study_media to show an image or Figma prototype during the interview. It is categorised as a Write tool in the Mcp Usercall MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on create_study? +

Register the Mcp Usercall MCP server in PolicyLayer and add a rule for create_study: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Mcp Usercall. Nothing to install.

What risk level is create_study? +

create_study is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit create_study? +

Yes. Add a rate_limit block to the create_study rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create_study completely? +

Set action: deny in the PolicyLayer policy for create_study. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create_study? +

create_study is provided by the Mcp Usercall MCP server (junetic/usercall-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Mcp Usercall tool call.

Start from Mcp Usercall, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

5 Mcp Usercall tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.