publicar_ficha_clase · Moodle MCP: Risk & Policy

WHAT IT DOES

What publicar_ficha_clase does on Moodle

AI agents use publicar_ficha_clase to create or update resources in Moodle — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Moodle environment.

WHY IT NEEDS A POLICY

Why publicar_ficha_clase needs a policy

This tool creates or modifies pedagogical content (sections and modules) within Moodle courses. Publishing a lesson plan with components is a Write operation—it alters course structure reversibly. While it affects educational content, it is not Destructive (no deletion), Execute (no arbitrary code), or Financial.

From the tool's definition The tool 'publicar_ficha_clase' publishes content and creates/updates Moodle sections with modules. The description explicitly states it 'updates in place, never duplicates' and is 'Idempotent', indicating reversible modifications to course structure and…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

publicar_ficha_clase Rate-limited

publicar_ficha_clase stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "publicar_ficha_clase": {
      "limits": [
        {
          "counter": "publicar_ficha_clase_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Moodle, so you can run agents against it safely.

FAQ

Questions about publicar_ficha_clase

What does the publicar_ficha_clase tool do? +

Publish a FichaClase markdown file as a Moodle section with component modules. Idempotent: republishing the same Ficha updates in place, never duplicates. Default modo is. It is categorised as a Write tool in the Moodle MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on publicar_ficha_clase? +

Register the Moodle MCP server in PolicyLayer and add a rule for publicar_ficha_clase: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Moodle. Nothing to install.

What risk level is publicar_ficha_clase? +

publicar_ficha_clase is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit publicar_ficha_clase? +

Yes. Add a rate_limit block to the publicar_ficha_clase rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block publicar_ficha_clase completely? +

Set action: deny in the PolicyLayer policy for publicar_ficha_clase. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides publicar_ficha_clase? +

publicar_ficha_clase is provided by the Moodle MCP server (marcosnahuel/moodle-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.