wiki_write · Agent Wiki MCP: Risk & Policy

WHAT IT DOES

What wiki_write does on Agent Wiki

AI agents use wiki_write to create or update resources in Agent Wiki — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Agent Wiki environment.

WHY IT NEEDS A POLICY

Why wiki_write needs a policy

This tool creates or modifies wiki pages with structured content (YAML frontmatter + Markdown). While it persists data, the operations are inherently reversible—pages can be edited, deleted, or reverted. The sibling tool 'wiki_delete' exists separately, indicating deletion is a distinct operation.

From the tool's definition Tool description explicitly states 'Create or update a wiki page' and 'auto-manages timestamps' and 'auto-routes' content. These are reversible modifications to structured knowledge data.

Risk signalsAdmin/system-level operation

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

wiki_write Rate-limited

wiki_write stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wiki_write": {
      "limits": [
        {
          "counter": "wiki_write_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Agent Wiki, so you can run agents against it safely.

FAQ

Questions about wiki_write

What does the wiki_write tool do? +

Create or update a wiki page. Content should include YAML frontmatter (title, type, tags, sources) and Markdown body. Timestamps (created/updated) are auto-managed. Auto-routes root-level pages to matching topic subdirectories (via frontmatter. It is categorised as a Write tool in the Agent Wiki MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on wiki_write? +

Register the Agent Wiki MCP server in PolicyLayer and add a rule for wiki_write: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Agent Wiki. Nothing to install.

What risk level is wiki_write? +

wiki_write is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit wiki_write? +

Yes. Add a rate_limit block to the wiki_write rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block wiki_write completely? +

Set action: deny in the PolicyLayer policy for wiki_write. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides wiki_write? +

wiki_write is provided by the Agent Wiki MCP server (xinhuagu/agent-wiki). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.