office_create_manifest

What office_create_manifest does on Mcp Windows

AI agents use office_create_manifest to create or update resources in Mcp Windows, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcp Windows environment.

Why office_create_manifest is rated Medium

This tool creates a new manifest file artifact for Office Add-ins, which is a reversible write operation. It does not execute code, delete data, or move money. The severity is medium because a maliciously crafted manifest could potentially be used to load malicious Office Add-ins or modify Office behavior, but the tool itself only generates a template—actual deployment and execution depend on subsequent actions.

From the tool's definition Tool name 'office_create_manifest' and description 'Create a basic Office Add-in manifest template' indicate file creation (manifest template generation). The verb 'Create' and action of generating a new artifact classify this as a Write operation.

The rule that runs office_create_manifest safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Windows, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For office_create_manifest, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "office_create_manifest": {
      "limits": [
        {
          "counter": "office_create_manifest_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about office_create_manifest