Medium Risk

velog_update_series

Velog 시리즈의 이름 또는 URL slug를 수정합니다.

How to control velog_update_series ↓

What velog_update_series does on Velog

AI agents use velog_update_series to create or update resources in Velog — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Velog environment.

Medium Risk

Why velog_update_series needs a policy

This tool modifies existing series data (name and URL slug) but the changes are reversible—metadata can be updated again. It does not delete data (which would be Destructive) nor execute arbitrary code (Execute). The medium severity reflects that an AI agent could alter series organization and URLs affecting user content visibility, but the changes remain undoable.

From the tool's definition Tool name 'velog_update_series' and description 'Velog 시리즈의 이름 또는 URL slug를 수정합니다' (modifies the name or URL slug of a Velog series). The verb '수정합니다' (modify/update) indicates reversible changes to series metadata.

Documented attack patterns abuse exactly the kind of access velog_update_series gives an agent:

How to control velog_update_series

PolicyLayer is an MCP gateway — it sits between your AI agents and Velog, and nothing reaches the server without passing your rules. This is the rule we recommend for velog_update_series:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "velog_update_series": {
      "limits": [
        {
          "counter": "velog_update_series_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

velog_update_series stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Velog — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about velog_update_series

What does the velog_update_series tool do? +

Velog 시리즈의 이름 또는 URL slug를 수정합니다. It is categorised as a Write tool in the Velog MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on velog_update_series? +

Register the Velog MCP server in PolicyLayer and add a rule for velog_update_series: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Velog. Nothing to install.

What risk level is velog_update_series? +

velog_update_series is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit velog_update_series? +

Yes. Add a rate_limit block to the velog_update_series rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block velog_update_series completely? +

Set action: deny in the PolicyLayer policy for velog_update_series. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides velog_update_series? +

velog_update_series is provided by the Velog MCP server (seongwon030/velog_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Velog tool call.

Start from Velog, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

29 Velog tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.