resuml_init_resume · Resuml MCP: Risk & Policy

WHAT IT DOES

What resuml_init_resume does on Resuml

AI agents use resuml_init_resume to create or update resources in Resuml — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Resuml environment.

WHY IT NEEDS A POLICY

Why resuml_init_resume needs a policy

This tool creates a new resume template (reversible write operation) with no side effects beyond generating a file or data structure that can be modified or deleted. It does not execute external code, delete data, move money, or trigger irreversible changes. The low severity reflects that misuse would only result in an unwanted template being generated, which is easily discardable.

From the tool's definition Tool description states it will 'Generate a starter resume YAML template', which creates new data in the form of a template file.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

resuml_init_resume Rate-limited

resuml_init_resume stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "resuml_init_resume": {
      "limits": [
        {
          "counter": "resuml_init_resume_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Resuml, so you can run agents against it safely.

FAQ

Questions about resuml_init_resume

What does the resuml_init_resume tool do? +

Generate a starter resume YAML template following the JSON Resume schema. It is categorised as a Write tool in the Resuml MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on resuml_init_resume? +

Register the Resuml MCP server in PolicyLayer and add a rule for resuml_init_resume: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Resuml. Nothing to install.

What risk level is resuml_init_resume? +

resuml_init_resume is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit resuml_init_resume? +

Yes. Add a rate_limit block to the resuml_init_resume rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block resuml_init_resume completely? +

Set action: deny in the PolicyLayer policy for resuml_init_resume. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides resuml_init_resume? +

resuml_init_resume is provided by the Resuml MCP server (resuml). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.