Medium Risk

add_slide_notes

为PowerPoint演示文稿的指定幻灯片添加备注。 Args: file_path: PowerPoint演示文稿的完整路径或相对于输出目录的路径 slide_index: 要添加备注的幻灯片索引(从1开始计数) notes_text: 备注内容 Returns: 操作结果信息

How to control add_slide_notes ↓

AI agents use add_slide_notes to create or update resources in Office Editor — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Office Editor environment.

Medium Risk

This tool creates or modifies data (slide notes) within a PowerPoint file without deleting or destroying existing content. The operation is reversible—notes can be edited or removed later. It does not execute code, delete data, or involve financial transactions, making it a Write operation with low severity since modifying speaker notes has minimal blast radius compared to other office document modifications.

From the tool's definition Tool description indicates it 'adds notes' (添加备注) to PowerPoint slides, modifying document content in a reversible manner. The function parameters show it takes a file_path, slide_index, and notes_text to add speaker notes to a presentation.

Documented attack patterns abuse exactly the kind of access add_slide_notes gives an agent:

PolicyLayer is an MCP gateway — it sits between your AI agents and Office Editor, and nothing reaches the server without passing your rules. This is the rule we recommend for add_slide_notes:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_slide_notes": {
      "limits": [
        {
          "counter": "add_slide_notes_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

add_slide_notes stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Office Editor — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Go deeper

What does the add_slide_notes tool do? +

为PowerPoint演示文稿的指定幻灯片添加备注。 Args: file_path: PowerPoint演示文稿的完整路径或相对于输出目录的路径 slide_index: 要添加备注的幻灯片索引(从1开始计数) notes_text: 备注内容 Returns: 操作结果信息. It is categorised as a Write tool in the Office Editor MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on add_slide_notes? +

Register the Office Editor MCP server in PolicyLayer and add a rule for add_slide_notes: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Office Editor. Nothing to install.

What risk level is add_slide_notes? +

add_slide_notes is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit add_slide_notes? +

Yes. Add a rate_limit block to the add_slide_notes rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block add_slide_notes completely? +

Set action: deny in the PolicyLayer policy for add_slide_notes. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides add_slide_notes? +

add_slide_notes is provided by the Office Editor MCP server (thewdy/office-editor-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Office Editor tool call.

Deterministic rules across all 88 Office Editor tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

88 Office Editor tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.