retarget_journal · Academic Figures MCP: Risk & Policy

WHAT IT DOES

What retarget_journal does on Academic Figures

AI agents use retarget_journal to create or update resources in Academic Figures — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Academic Figures environment.

WHY IT NEEDS A POLICY

Why retarget_journal needs a policy

This is a Write operation because it modifies an existing manifest by applying a new journal profile and regenerates its output. It is not Destructive because the original manifest remains and changes are reversible (you can retarget to another journal).

From the tool's definition The tool 'retarget_journal' applies a new journal profile to an existing manifest and regenerates the figure. This modifies the manifest by applying new parameters/metadata (journal profile), and regenerates output.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

retarget_journal Rate-limited

retarget_journal stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "retarget_journal": {
      "limits": [
        {
          "counter": "retarget_journal_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Academic Figures, so you can run agents against it safely.

FAQ

Questions about retarget_journal

What does the retarget_journal tool do? +

Apply a new journal profile to an existing manifest and regenerate the figure. It is categorised as a Write tool in the Academic Figures MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on retarget_journal? +

Register the Academic Figures MCP server in PolicyLayer and add a rule for retarget_journal: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Academic Figures. Nothing to install.

What risk level is retarget_journal? +

retarget_journal is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit retarget_journal? +

Yes. Add a rate_limit block to the retarget_journal rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block retarget_journal completely? +

Set action: deny in the PolicyLayer policy for retarget_journal. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides retarget_journal? +

retarget_journal is provided by the Academic Figures MCP server (u9401066/academic-figures-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.