# monday-create-update

Add a comment or update to an item

Agent View of the PolicyLayer registry record for `monday-create-update`. HTML page: https://policylayer.com/tools/monday/monday-create-update

## Facts

- Tool: `monday-create-update`
- Server: @mcp Server Monday (`@mcp-server-monday`) — https://policylayer.com/tools/monday.md
- Install: `npx -y @mcp-server-monday`
- Homepage: https://github.com/mondaycom/mcp
- Risk category: Write (Medium risk)
- Registry record: grade D, identity verified
- Server auth posture: gated
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "monday-create-update",
    "arguments": {}
  }
}
```

## Why monday-create-update is rated Medium

This tool creates or modifies data reversibly by adding comments or updates to items. It does not delete data (would be Destructive), execute arbitrary code (would be Execute), or move money (would be Financial). The reversible nature of adding comments/updates and the ability to edit or remove them later places this firmly in the Write category.

From the tool's own definition: "Tool name 'monday-create-update' and description 'Add a comment or update to an item' indicate creation of new content (comments/updates) within an existing item."

Risk signals: Posts comments visible to the team

## Use case

AI agents use monday-create-update to create or update resources in @mcp Server Monday, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your @mcp Server Monday environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches @mcp Server Monday:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "monday-create-update": {
      "limits": [
        {
          "counter": "monday-create-update_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on @mcp Server Monday (15)

- `monday-delete-item` — Destructive — https://policylayer.com/tools/monday/monday-delete-item.md
- `monday-get-board-groups` — Read — https://policylayer.com/tools/monday/monday-get-board-groups.md
- `monday-get-doc-content` — Read — https://policylayer.com/tools/monday/monday-get-doc-content.md
- `monday-get-docs` — Read — https://policylayer.com/tools/monday/monday-get-docs.md
- `monday-get-item-updates` — Read — https://policylayer.com/tools/monday/monday-get-item-updates.md
- `monday-list-boards` — Read — https://policylayer.com/tools/monday/monday-list-boards.md
- `monday-list-items-in-groups` — Read — https://policylayer.com/tools/monday/monday-list-items-in-groups.md
- `monday-list-subitems-in-items` — Read — https://policylayer.com/tools/monday/monday-list-subitems-in-items.md
- `monday-add-doc-block` — Write — https://policylayer.com/tools/monday/monday-add-doc-block.md
- `monday-archive-item` — Write — https://policylayer.com/tools/monday/monday-archive-item.md
- `monday-create-board` — Write — https://policylayer.com/tools/monday/monday-create-board.md
- `monday-create-board-group` — Write — https://policylayer.com/tools/monday/monday-create-board-group.md
- `monday-create-doc` — Write — https://policylayer.com/tools/monday/monday-create-doc.md
- `monday-create-item` — Write — https://policylayer.com/tools/monday/monday-create-item.md
- `monday-move-item-to-group` — Write — https://policylayer.com/tools/monday/monday-move-item-to-group.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=monday · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/monday
