Medium Risk

generate_column_chart

Generate a column chart, which are best for comparing categorical data, such as, when values are close, column charts are preferable because our eyes are better at judging height than other visual elements like area or angles.

How to control generate_column_chart ↓

What generate_column_chart does on Chart Offline

AI agents use generate_column_chart to create or update resources in Chart Offline — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Chart Offline environment.

Medium Risk

Why generate_column_chart needs a policy

This tool creates (generates) chart data/SVG output that is stored or transmitted; it is a generative operation with no side effects beyond producing the chart artifact itself. It does not execute arbitrary code, delete data, or move money. Chart generation is reversible (output can be discarded or overwritten) and is a pure content creation act, fitting the Write category.

From the tool's definition Tool name 'generate_column_chart' and description state it 'Generate[s] a column chart' — a chart generation operation that creates new SVG output. The server is explicitly described as 'generating 15 types of SVG charts.'

Documented attack patterns abuse exactly the kind of access generate_column_chart gives an agent:

How to control generate_column_chart

PolicyLayer is an MCP gateway — it sits between your AI agents and Chart Offline, and nothing reaches the server without passing your rules. This is the rule we recommend for generate_column_chart:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "generate_column_chart": {
      "limits": [
        {
          "counter": "generate_column_chart_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

generate_column_chart stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Chart Offline — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about generate_column_chart

What does the generate_column_chart tool do? +

Generate a column chart, which are best for comparing categorical data, such as, when values are close, column charts are preferable because our eyes are better at judging height than other visual elements like area or angles. It is categorised as a Write tool in the Chart Offline MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on generate_column_chart? +

Register the Chart Offline MCP server in PolicyLayer and add a rule for generate_column_chart: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Chart Offline. Nothing to install.

What risk level is generate_column_chart? +

generate_column_chart is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit generate_column_chart? +

Yes. Add a rate_limit block to the generate_column_chart rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block generate_column_chart completely? +

Set action: deny in the PolicyLayer policy for generate_column_chart. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides generate_column_chart? +

generate_column_chart is provided by the Chart Offline MCP server (liukeyu800/mcp-server-chart-offline). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Chart Offline tool call.

Start from Chart Offline, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

15 Chart Offline tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.