update_image

What update_image does on Docx

AI agents use update_image to create or update resources in Docx, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Docx environment.

Why update_image is rated Medium

The tool modifies existing image content within a Word document by replacing its binary data. This is a reversible write operation (the original image can theoretically be restored from backups or undo history), distinguishing it from destructive deletion. The scope is limited to image replacement within documents managed by the server, giving it medium severity rather than high.

From the tool's definition Tool description: 'Replace the binary for an existing image in-place.' The verb 'replace' indicates modification of existing data (the image binary), which is a write operation. The Word document structure is altered but not deleted or destroyed.

The rule that runs update_image safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_image, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_image": {
      "limits": [
        {
          "counter": "update_image_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_image