apply_brand_profile · AI-Canvas MCP Server MCP

WHAT IT DOES

What apply_brand_profile does on AI-Canvas MCP Server

AI agents use apply_brand_profile to create or update resources in AI-Canvas MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your AI-Canvas MCP Server environment.

WHY IT NEEDS A POLICY

Why apply_brand_profile needs a policy

This tool modifies the current project by injecting brand tokens and enabling validation rules. These are reversible changes to design configuration (Write category) rather than irreversible deletion (Destructive) or code execution (Execute). The severity is medium because misuse could alter design consistency across a project, but changes can be undone.

From the tool's definition Tool description states 'Apply a saved brand profile to the current project' and 'injects brand tokens and activates constraint validation', indicating modification of project state and design tokens.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

apply_brand_profile Rate-limited

apply_brand_profile stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "apply_brand_profile": {
      "limits": [
        {
          "counter": "apply_brand_profile_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches AI-Canvas MCP Server, so you can run agents against it safely.

FAQ

Questions about apply_brand_profile

What does the apply_brand_profile tool do? +

Apply a saved brand profile to the current project — injects brand tokens and activates constraint validation. It is categorised as a Write tool in the AI-Canvas MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on apply_brand_profile? +

Register the AI-Canvas MCP Server MCP server in PolicyLayer and add a rule for apply_brand_profile: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches AI-Canvas MCP Server. Nothing to install.

What risk level is apply_brand_profile? +

apply_brand_profile is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit apply_brand_profile? +

Yes. Add a rate_limit block to the apply_brand_profile rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block apply_brand_profile completely? +

Set action: deny in the PolicyLayer policy for apply_brand_profile. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides apply_brand_profile? +

apply_brand_profile is provided by the AI-Canvas MCP Server MCP server (laoluojuhai/ai-canvas). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.