upload_mms_image

MMS 발송에 사용할 이미지 1~3장을 슈어엠 서버에 업로드하고 단일 imageKey 를 반환합니다. 받은 imageKey 를 send_message 의 imageKey 파라미터에 전달해 MMS 로 발송. ⚠️ 이미지 규격: 확장자 jpg, 한 장 500KB 이하, 가로/세로 1000px 이하, 합산 1MB 미만. 입력은 서버 프로세스가 접근 가능한 로컬 jpg 파일 경로(path).

Server SureM SMS MCP suremapp/surem-sms-mcp

Category Write

Risk class Medium

Parameters 00 required

WHAT IT DOES

What upload_mms_image does on SureM SMS MCP

AI agents use upload_mms_image to create or update resources in SureM SMS MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your SureM SMS MCP environment.

WHY IT NEEDS A POLICY

Why upload_mms_image needs a policy

This tool creates new data (image uploads) on the SureM platform that can be referenced later for MMS sending. It is reversible (images can be deleted) and has no direct financial or destructive impact.

From the tool's definition Tool description states it 'uploads' (업로드) images to the SureM server and 'returns' (반환) an imageKey. This is a create/write operation that modifies server state by storing image data.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

upload_mms_image Rate-limited

upload_mms_image stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "upload_mms_image": {
      "limits": [
        {
          "counter": "upload_mms_image_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches SureM SMS MCP, so you can run agents against it safely.

FAQ

Questions about upload_mms_image

What does the upload_mms_image tool do? +

How do I enforce a policy on upload_mms_image? +

Register the SureM SMS MCP server in PolicyLayer and add a rule for upload_mms_image: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches SureM SMS MCP. Nothing to install.

What risk level is upload_mms_image? +

upload_mms_image is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit upload_mms_image? +

Yes. Add a rate_limit block to the upload_mms_image rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block upload_mms_image completely? +

Set action: deny in the PolicyLayer policy for upload_mms_image. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides upload_mms_image? +

upload_mms_image is provided by the SureM SMS MCP server (suremapp/surem-sms-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.