assemble_resume · Nima Career MCP: Risk & Policy

WHAT IT DOES

What assemble_resume does on Nima Career

AI agents use assemble_resume to create or update resources in Nima Career — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Nima Career environment.

WHY IT NEEDS A POLICY

Why assemble_resume needs a policy

The tool creates or generates a resume (a new output artifact) by assembling pre-approved career material. This is a Write operation—it produces a new document that combines existing curated data. However, severity is low because: (1) the source data is described as 'public-safe,' (2) the operation is reversible (a resume can be discarded or regenerated), and (3) no external systems are modified.

From the tool's definition Tool name 'assemble_resume' indicates creation/compilation of a document. Description is empty, limiting direct evidence. Sibling tools (list_projects, list_experience, get_profile, etc.) are all read-only retrievals from a public-safe career history.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

assemble_resume Rate-limited

assemble_resume stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "assemble_resume": {
      "limits": [
        {
          "counter": "assemble_resume_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Nima Career, so you can run agents against it safely.

FAQ

Questions about assemble_resume

What does the assemble_resume tool do? +

assemble_resume. It is categorised as a Write tool in the Nima Career MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on assemble_resume? +

Register the Nima Career MCP server in PolicyLayer and add a rule for assemble_resume: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Nima Career. Nothing to install.

What risk level is assemble_resume? +

assemble_resume is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit assemble_resume? +

Yes. Add a rate_limit block to the assemble_resume rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block assemble_resume completely? +

Set action: deny in the PolicyLayer policy for assemble_resume. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides assemble_resume? +

assemble_resume is provided by the Nima Career MCP server (nima-karami/nima-career-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.