move_task

What move_task does on Todos

AI agents use move_task to create or update resources in Todos, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Todos environment.

Why move_task is rated Medium

The tool modifies task relationships and organizational structure but does not delete, destroy, or create financial obligations. It is reversible (tasks can be moved again), so it is Write rather than Destructive. The severity is medium because misuse could reorganize tasks in confusing ways, but the operation is non-destructive and the blast radius is limited to task organization within the system.

From the tool's definition Tool description states it "Re-parent a task to another project and/or task list, preserving its id and history." This is a modification operation that changes task metadata (parent/project association) but is reversible—tasks can be moved back or reorganized.

The rule that runs move_task safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Todos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For move_task, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "move_task": {
      "limits": [
        {
          "counter": "move_task_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about move_task