Medium Risk

transpose_passage

transpose_passage

How to control transpose_passage ↓

What transpose_passage does on Mcp Score

AI agents use transpose_passage to create or update resources in Mcp Score — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcp Score environment.

Medium Risk

Why transpose_passage needs a policy

Based on the tool name and server context, 'transpose_passage' most likely modifies (transposes) a section of music notation in a score — a reversible write operation. However, with no description available, confidence is reduced. It could also be Execute if it triggers live manipulation in MuseScore. Write is chosen as the most probable category given the reversible nature of transposition.

From the tool's definition Tool name 'transpose_passage' on a music notation server; description is empty and uninformative.

Documented attack patterns abuse exactly the kind of access transpose_passage gives an agent:

How to control transpose_passage

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Score, and nothing reaches the server without passing your rules. This is the rule we recommend for transpose_passage:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "transpose_passage": {
      "limits": [
        {
          "counter": "transpose_passage_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

transpose_passage stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Mcp Score — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about transpose_passage

What does the transpose_passage tool do? +

transpose_passage. It is categorised as a Write tool in the Mcp Score MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on transpose_passage? +

Register the Mcp Score MCP server in PolicyLayer and add a rule for transpose_passage: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Mcp Score. Nothing to install.

What risk level is transpose_passage? +

transpose_passage is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit transpose_passage? +

Yes. Add a rate_limit block to the transpose_passage rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block transpose_passage completely? +

Set action: deny in the PolicyLayer policy for transpose_passage. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides transpose_passage? +

transpose_passage is provided by the Mcp Score MCP server (tskovlund/mcp-score). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Mcp Score tool call.

Start from Mcp Score, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

18 Mcp Score tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.