merge_review_rounds

What merge_review_rounds does on Docx

AI agents use merge_review_rounds to create or update resources in Docx, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Docx environment.

Why merge_review_rounds is rated Medium

This tool modifies an open document by merging tracked changes from multiple sources. While reversible (changes can be undone via undo/rejection mechanisms typical in document editors), it represents a write operation that transforms document state. It does not delete data irreversibly, so Destructive does not apply. The operation is a create/modify action rather than read-only or code execution.

From the tool's definition Tool name 'merge_review_rounds' and description 'Merge tracked changes from N reviewer copies into the open document' — this performs a modification operation that integrates external changes into the document, materially altering its content.

The rule that runs merge_review_rounds safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For merge_review_rounds, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "merge_review_rounds": {
      "limits": [
        {
          "counter": "merge_review_rounds_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about merge_review_rounds