可以基于用户的简短设计需求,包括纯文本需求、纯参考图片需求,或文本+参考图需求,生成详细的设计说明文档,仅在用户明确提出需要拓展设计需求时使用此工具。
AI agents use gen_description to create or update resources in Modao Proto — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Modao Proto environment.
This tool creates new design documentation content that is stored and can be modified or built upon. While the generated content is reversible and non-destructive compared to actual data deletion, it represents a write operation that produces persistent artifacts in a design system.
From the tool's definition The tool generates and creates detailed design specification documents from user requirements. The description states it produces '详细的设计说明文档' (detailed design specification documents) based on user inputs.
Documented attack patterns abuse exactly the kind of access gen_description gives an agent:
PolicyLayer is an MCP gateway — it sits between your AI agents and Modao Proto, and nothing reaches the server without passing your rules. This is the rule we recommend for gen_description:
{
"version": "1",
"default": "deny",
"tools": {
"gen_description": {
"limits": [
{
"counter": "gen_description_rate",
"window": "minute",
"max": 30,
"scope": "grant"
}
]
}
}
} gen_description stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.
Free to start. No card required.
可以基于用户的简短设计需求,包括纯文本需求、纯参考图片需求,或文本+参考图需求,生成详细的设计说明文档,仅在用户明确提出需要拓展设计需求时使用此工具。. It is categorised as a Write tool in the Modao Proto MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Modao Proto MCP server in PolicyLayer and add a rule for gen_description: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Modao Proto. Nothing to install.
gen_description is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the gen_description rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for gen_description. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
gen_description is provided by the Modao Proto MCP server (modao-dev/modao-proto-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Start from Modao Proto, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.
Free to start. No card required.
3 Modao Proto tools catalogued and risk-classified — across an index of 43,000+ MCP servers.