Open the Sync image/audio upload widget so a user can choose a ChatGPT file or upload a supported local image/audio file, then stage it as a durable Sync assetId. Use this by default when the user wants to upload or choose a local image/audio file and has not attached the file to ChatGPT yet. For...
AI agents use open-upload-widget to create or update resources in Sync MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Sync MCP Server environment.
This tool creates and stores new assets in the Sync system, making it a Write operation. It does not irreversibly delete data (not Destructive), execute arbitrary code (not Execute), or move money (not Financial).
From the tool's definition Tool description states it enables uploading files and staging them as 'durable Sync assetId', which creates persistent data in the Sync system.
Attacks that exploit this kind of access
Open the Sync image/audio upload widget so a user can choose a ChatGPT file or upload a supported local image/audio file, then stage it as a durable Sync assetId. Use this by default when the user wants to upload or choose a local image/audio file and has not attached the file to ChatGPT yet. For image-to-speech requests, call this with requestedMediaType:. It is categorised as a Write tool in the Sync MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Sync MCP Server MCP server in PolicyLayer and add a rule for open-upload-widget: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Sync MCP Server. Nothing to install.
open-upload-widget is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the open-upload-widget rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for open-upload-widget. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
open-upload-widget is provided by the Sync MCP Server MCP server (synchronicity-labs/mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
open-upload-widget is one line of Sync MCP Server's registry record.
The record carries the whole server: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.
Teams ship this data inside their own products. See what a licence covers →