Medium Risk

copy_to_clipboard

Copy a specific history item back to current clipboard

How to control copy_to_clipboard ↓

What copy_to_clipboard does on Maccy Clipboard MCP

AI agents use copy_to_clipboard to create or update resources in Maccy Clipboard MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Maccy Clipboard MCP environment.

Medium Risk

Why copy_to_clipboard needs a policy

This tool writes data to the system clipboard, which modifies the current state of the clipboard. While the action is reversible (the clipboard can be overwritten with other content), it represents a write operation that could allow an AI agent to inject arbitrary content into the clipboard, potentially affecting subsequent paste operations or being used to exfiltrate sensitive data.

From the tool's definition Tool name 'copy_to_clipboard' and description 'Copy a specific history item back to current clipboard' indicates modification of the clipboard state.

Documented attack patterns abuse exactly the kind of access copy_to_clipboard gives an agent:

How to control copy_to_clipboard

PolicyLayer is an MCP gateway — it sits between your AI agents and Maccy Clipboard MCP, and nothing reaches the server without passing your rules. This is the rule we recommend for copy_to_clipboard:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "copy_to_clipboard": {
      "limits": [
        {
          "counter": "copy_to_clipboard_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

copy_to_clipboard stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Maccy Clipboard MCP — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about copy_to_clipboard

What does the copy_to_clipboard tool do? +

Copy a specific history item back to current clipboard. It is categorised as a Write tool in the Maccy Clipboard MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on copy_to_clipboard? +

Register the Maccy Clipboard MCP server in PolicyLayer and add a rule for copy_to_clipboard: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Maccy Clipboard MCP. Nothing to install.

What risk level is copy_to_clipboard? +

copy_to_clipboard is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit copy_to_clipboard? +

Yes. Add a rate_limit block to the copy_to_clipboard rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block copy_to_clipboard completely? +

Set action: deny in the PolicyLayer policy for copy_to_clipboard. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides copy_to_clipboard? +

copy_to_clipboard is provided by the Maccy Clipboard MCP server (vlad-ds/maccy-clipboard-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Maccy Clipboard MCP tool call.

Start from Maccy Clipboard MCP, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

8 Maccy Clipboard MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.