path_arcto · SVG Canvas MCP: Risk & Policy

WHAT IT DOES

What path_arcto does on SVG Canvas MCP

AI agents use path_arcto to create or update resources in SVG Canvas MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your SVG Canvas MCP environment.

WHY IT NEEDS A POLICY

Why path_arcto needs a policy

This tool modifies SVG path objects by appending arc geometry, which is a reversible creation of graphical elements. It does not execute arbitrary code, delete data, or trigger external side effects. It falls squarely into Write category - creating or modifying data within the SVG canvas context. Low severity because misuse would only result in unintended SVG graphics that can be easily edited or undone.

From the tool's definition The tool description states it adds an arc to the current path (in Korean: '현재 패스에 호(arc)를 추가합니다'). The verb 'add' indicates a create/modify operation on SVG path data.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

path_arcto Rate-limited

path_arcto stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "path_arcto": {
      "limits": [
        {
          "counter": "path_arcto_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches SVG Canvas MCP, so you can run agents against it safely.

FAQ

Questions about path_arcto

What does the path_arcto tool do? +

현재 패스에 호(arc)를 추가합니다. It is categorised as a Write tool in the SVG Canvas MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on path_arcto? +

Register the SVG Canvas MCP server in PolicyLayer and add a rule for path_arcto: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches SVG Canvas MCP. Nothing to install.

What risk level is path_arcto? +

path_arcto is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit path_arcto? +

Yes. Add a rate_limit block to the path_arcto rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block path_arcto completely? +

Set action: deny in the PolicyLayer policy for path_arcto. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides path_arcto? +

path_arcto is provided by the SVG Canvas MCP server (kim62210/svg-canvas-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.