create_text_qr · QR for Agent MCP: Risk & Policy

WHAT IT DOES

What create_text_qr does on QR for Agent

AI agents use create_text_qr to create or update resources in QR for Agent — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your QR for Agent environment.

PARAMETERS

Parameter	Type	Required	Description
`label`	string	—	Label for this QR code.
`format`	string	—	Image format.
`content`	string	Yes	Plain text content to encode.
`logo_url`	string	—	Logo URL or data URI.
`dot_style`	string	—	Dot shape.
`frame_text`	string	—	CTA text on frame (max 30 chars).
`frame_color`	string	—	Frame background color.
`frame_style`	string	—	Frame style around QR.
`corner_style`	string	—	Corner shape.
`background_color`	string	—	Hex color for background.
`foreground_color`	string	—	Hex color for dots.
`frame_text_color`	string	—	Frame text color.

Parameters from the server's own tool schema.

WHY IT NEEDS A POLICY

Why create_text_qr needs a policy

This tool creates and stores new QR code artifacts containing user-supplied text. It is a Write operation because it generates new data that persists (reversible via deletion). There is no execution of external commands, no financial transaction, no destructive overwrite, and no data retrieval—just creation.

From the tool's definition Tool name 'create_text_qr' and description 'Create a QR code' indicate data creation; 'contains plain text' and 'freeform content' confirm content is being generated and stored.

Risk signalsAccepts raw HTML/template content (content) · High parameter count (12 properties)

Attacks that exploit this kind of access

Questions about create_text_qr

What does the create_text_qr tool do? +

Create a QR code that contains plain text. When scanned, the text is displayed directly. Useful for messages, notes, or any freeform content. It is categorised as a Write tool in the QR for Agent MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

What parameters does create_text_qr accept? +

create_text_qr accepts 12 parameters: label, format, content, logo_url, dot_style, frame_text, frame_color, frame_style, corner_style, background_color, foreground_color, frame_text_color. Required: content. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on create_text_qr? +

Register the QR for Agent MCP server in PolicyLayer and add a rule for create_text_qr: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches QR for Agent. Nothing to install.

What risk level is create_text_qr? +

create_text_qr is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit create_text_qr? +

Yes. Add a rate_limit block to the create_text_qr rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create_text_qr completely? +

Set action: deny in the PolicyLayer policy for create_text_qr. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create_text_qr? +

create_text_qr is provided by the QR for Agent MCP server (qr-for-agent). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.