pinterest_download · Pinterest Vision MCP: Risk & Policy

WHAT IT DOES

What pinterest_download does on Pinterest Vision

AI agents use pinterest_download to create or update resources in Pinterest Vision — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Pinterest Vision environment.

WHY IT NEEDS A POLICY

Why pinterest_download needs a policy

This tool writes image files to the local filesystem. It creates new files on disk, which is a reversible write operation (files can be deleted afterward). It does not execute code, delete data, or involve financial transactions. The blast radius is medium because an agent could download large volumes of content or fill up disk space, but it doesn't overwrite or destroy existing data.

From the tool's definition Download images from a pinterest_search result to local filesystem

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

pinterest_download Rate-limited

pinterest_download stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pinterest_download": {
      "limits": [
        {
          "counter": "pinterest_download_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Pinterest Vision, so you can run agents against it safely.

FAQ

Questions about pinterest_download

What does the pinterest_download tool do? +

Download images from a pinterest_search result to local filesystem. It is categorised as a Write tool in the Pinterest Vision MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on pinterest_download? +

Register the Pinterest Vision MCP server in PolicyLayer and add a rule for pinterest_download: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Pinterest Vision. Nothing to install.

What risk level is pinterest_download? +

pinterest_download is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit pinterest_download? +

Yes. Add a rate_limit block to the pinterest_download rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block pinterest_download completely? +

Set action: deny in the PolicyLayer policy for pinterest_download. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides pinterest_download? +

pinterest_download is provided by the Pinterest Vision MCP server (kreminskaya/pinterest-vision-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.