Medium Risk

gen_description

可以基于用户的简短设计需求,包括纯文本需求、纯参考图片需求,或文本+参考图需求,生成详细的设计说明文档,仅在用户明确提出需要拓展设计需求时使用此工具。

How to control gen_description ↓

What gen_description does on Modao Proto

AI agents use gen_description to create or update resources in Modao Proto — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Modao Proto environment.

Medium Risk

Why gen_description needs a policy

This tool creates new design documentation content that is stored and can be modified or built upon. While the generated content is reversible and non-destructive compared to actual data deletion, it represents a write operation that produces persistent artifacts in a design system.

From the tool's definition The tool generates and creates detailed design specification documents from user requirements. The description states it produces '详细的设计说明文档' (detailed design specification documents) based on user inputs.

Documented attack patterns abuse exactly the kind of access gen_description gives an agent:

How to control gen_description

PolicyLayer is an MCP gateway — it sits between your AI agents and Modao Proto, and nothing reaches the server without passing your rules. This is the rule we recommend for gen_description:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "gen_description": {
      "limits": [
        {
          "counter": "gen_description_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

gen_description stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Modao Proto — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about gen_description

What does the gen_description tool do? +

可以基于用户的简短设计需求,包括纯文本需求、纯参考图片需求,或文本+参考图需求,生成详细的设计说明文档,仅在用户明确提出需要拓展设计需求时使用此工具。. It is categorised as a Write tool in the Modao Proto MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on gen_description? +

Register the Modao Proto MCP server in PolicyLayer and add a rule for gen_description: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Modao Proto. Nothing to install.

What risk level is gen_description? +

gen_description is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit gen_description? +

Yes. Add a rate_limit block to the gen_description rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block gen_description completely? +

Set action: deny in the PolicyLayer policy for gen_description. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides gen_description? +

gen_description is provided by the Modao Proto MCP server (modao-dev/modao-proto-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Modao Proto tool call.

Start from Modao Proto, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

3 Modao Proto tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.