add_word_bookmark · Office MCP Server MCP: Risk & Policy

WHAT IT DOES

What add_word_bookmark does on Office MCP Server

AI agents use add_word_bookmark to create or update resources in Office MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Office MCP Server environment.

WHY IT NEEDS A POLICY

Why add_word_bookmark needs a policy

Adding a bookmark to a Word document is a non-destructive, reversible write operation. It modifies document structure but does not delete, execute arbitrary code, or cause financial impact. Severity is medium because misuse could inject unwanted bookmarks affecting document navigation or structure, but the impact is contained and easily corrected.

From the tool's definition Tool name 'add_word_bookmark' and description '向 Word 文档添加书签' (adds bookmark to Word document) indicate document modification. This is a reversible operation that creates/adds content to an existing document.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

add_word_bookmark Rate-limited

add_word_bookmark stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "add_word_bookmark": {
      "limits": [
        {
          "counter": "add_word_bookmark_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Office MCP Server, so you can run agents against it safely.

FAQ

Questions about add_word_bookmark

What does the add_word_bookmark tool do? +

向 Word 文档添加书签. It is categorised as a Write tool in the Office MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on add_word_bookmark? +

Register the Office MCP Server MCP server in PolicyLayer and add a rule for add_word_bookmark: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Office MCP Server. Nothing to install.

What risk level is add_word_bookmark? +

add_word_bookmark is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit add_word_bookmark? +

Yes. Add a rate_limit block to the add_word_bookmark rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block add_word_bookmark completely? +

Set action: deny in the PolicyLayer policy for add_word_bookmark. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides add_word_bookmark? +

add_word_bookmark is provided by the Office MCP Server MCP server (walkingzzzy/office-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.