Medium Risk

add-words-batch

Add words to vocabulary list and create Anki cards (supports both single and batch operations). For single word, pass an array with one item.

How to control add-words-batch ↓

What add-words-batch does on Anki

AI agents use add-words-batch to create or update resources in Anki — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Anki environment.

Medium Risk

Why add-words-batch needs a policy

This tool creates and modifies Anki cards and vocabulary lists, which are reversible write operations. It does not delete data (would be Destructive), execute arbitrary code (would be Execute), or move money (would be Financial).

From the tool's definition Tool description states "Add words to vocabulary list and create Anki cards". The verb 'add' and 'create' indicate write operations that modify data in Anki decks.

Documented attack patterns abuse exactly the kind of access add-words-batch gives an agent:

How to control add-words-batch

PolicyLayer is an MCP gateway — it sits between your AI agents and Anki, and nothing reaches the server without passing your rules. This is the rule we recommend for add-words-batch:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "add-words-batch": {
      "limits": [
        {
          "counter": "add-words-batch_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

add-words-batch stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Anki — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about add-words-batch

What does the add-words-batch tool do? +

Add words to vocabulary list and create Anki cards (supports both single and batch operations). For single word, pass an array with one item. It is categorised as a Write tool in the Anki MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on add-words-batch? +

Register the Anki MCP server in PolicyLayer and add a rule for add-words-batch: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Anki. Nothing to install.

What risk level is add-words-batch? +

add-words-batch is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit add-words-batch? +

Yes. Add a rate_limit block to the add-words-batch rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block add-words-batch completely? +

Set action: deny in the PolicyLayer policy for add-words-batch. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides add-words-batch? +

add-words-batch is provided by the Anki MCP server (solidspoon/anki-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Anki tool call.

Start from Anki, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

3 Anki tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.