change_slide_master · Keynote MCP Server MCP: Risk & Policy

WHAT IT DOES

What change_slide_master does on Keynote MCP Server

AI agents use change_slide_master to create or update resources in Keynote MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Keynote MCP Server environment.

WHY IT NEEDS A POLICY

Why change_slide_master needs a policy

This tool falls under Write because it creates or modifies presentation data reversibly. Changing a slide master alters the slide's visual layout and structure but does not delete data, execute arbitrary code, or commit financial transactions. The modification is reversible—a user or agent could change the master slide back to a previous state.

From the tool's definition Tool modifies slide properties by changing the master slide (layout) of a slide, which is a reversible operation.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

change_slide_master Rate-limited

change_slide_master stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "change_slide_master": {
      "limits": [
        {
          "counter": "change_slide_master_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Keynote MCP Server, so you can run agents against it safely.

FAQ

Questions about change_slide_master

What does the change_slide_master tool do? +

Changes the master slide (layout) of a slide. The master name must match one of the available master slides in the current theme. It is categorised as a Write tool in the Keynote MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on change_slide_master? +

Register the Keynote MCP Server MCP server in PolicyLayer and add a rule for change_slide_master: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Keynote MCP Server. Nothing to install.

What risk level is change_slide_master? +

change_slide_master is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit change_slide_master? +

Yes. Add a rate_limit block to the change_slide_master rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block change_slide_master completely? +

Set action: deny in the PolicyLayer policy for change_slide_master. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides change_slide_master? +

change_slide_master is provided by the Keynote MCP Server MCP server (superdwayne/keynotemp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.