cond_clipboard_set · TermPipe MCP: Risk & Policy

WHAT IT DOES

What cond_clipboard_set does on TermPipe MCP

AI agents use cond_clipboard_set to create or update resources in TermPipe MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your TermPipe MCP environment.

WHY IT NEEDS A POLICY

Why cond_clipboard_set needs a policy

This tool creates or modifies data (clipboard content) without permanent deletion or irreversible side effects. While it affects system state, clipboard modifications are easily overwritten and pose minimal risk. It does not execute arbitrary commands, delete data, or commit financial transactions. The conditional prefix ('cond_') suggests it may have guard conditions, further reducing risk.

From the tool's definition Tool name is 'cond_clipboard_set' and description states 'Set clipboard content.' The action modifies the clipboard state, which is a reversible write operation.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

cond_clipboard_set Rate-limited

cond_clipboard_set stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cond_clipboard_set": {
      "limits": [
        {
          "counter": "cond_clipboard_set_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches TermPipe MCP, so you can run agents against it safely.

FAQ

Questions about cond_clipboard_set

What does the cond_clipboard_set tool do? +

Set clipboard content. It is categorised as a Write tool in the TermPipe MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on cond_clipboard_set? +

Register the TermPipe MCP server in PolicyLayer and add a rule for cond_clipboard_set: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches TermPipe MCP. Nothing to install.

What risk level is cond_clipboard_set? +

cond_clipboard_set is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit cond_clipboard_set? +

Yes. Add a rate_limit block to the cond_clipboard_set rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block cond_clipboard_set completely? +

Set action: deny in the PolicyLayer policy for cond_clipboard_set. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides cond_clipboard_set? +

cond_clipboard_set is provided by the TermPipe MCP server (wbind-core/termpipe-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.