planFileMove · TypeScript Rename Helper MCP: Risk & Policy

WHAT IT DOES

What planFileMove does on TypeScript Rename Helper

AI agents use planFileMove to create or update resources in TypeScript Rename Helper — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your TypeScript Rename Helper environment.

WHY IT NEEDS A POLICY

Why planFileMove needs a policy

This tool creates edit plans that would modify file structure and code (import paths), making it a Write operation. It does not execute these changes (would be Execute), nor does it delete data (would be Destructive). While the actual filesystem modification is deferred, the tool's primary purpose is to generate plans for reversible code and file structure changes.

From the tool's definition Tool performs 'file move/rename' and 'import path updates' which are reversible modifications. Description explicitly states 'without modifying the filesystem' indicating it returns plans rather than executing changes, but the core function is to plan write…

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

planFileMove Rate-limited

planFileMove stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "planFileMove": {
      "limits": [
        {
          "counter": "planfilemove_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches TypeScript Rename Helper, so you can run agents against it safely.

FAQ

Questions about planFileMove

What does the planFileMove tool do? +

Plan file move/rename with import path updates. Returns edit plans and file move suggestions without modifying the filesystem. It is categorised as a Write tool in the TypeScript Rename Helper MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on planFileMove? +

Register the TypeScript Rename Helper MCP server in PolicyLayer and add a rule for planFileMove: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches TypeScript Rename Helper. Nothing to install.

What risk level is planFileMove? +

planFileMove is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit planFileMove? +

Yes. Add a rate_limit block to the planFileMove rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block planFileMove completely? +

Set action: deny in the PolicyLayer policy for planFileMove. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides planFileMove? +

planFileMove is provided by the TypeScript Rename Helper MCP server (t09tanaka/ts-rename-helper-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.