feishu_bitable · Feishu MCP: Risk & Policy

WHAT IT DOES

What feishu_bitable does on Feishu

AI agents use feishu_bitable to create or update resources in Feishu — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Feishu environment.

WHY IT NEEDS A POLICY

Why feishu_bitable needs a policy

The tool performs reversible data modifications (create and update operations on records in Feishu tables). While it includes read/query capability, the primary capability encompasses creating and modifying data. This is Write-category because modifications are reversible and can be undone through updates or deletions by other tools.

From the tool's definition Tool description states '读写飞书多维表格数据（新增/查询/更新记录）' which translates to 'read/write Feishu multidimensional table data (add/query/update records)'. The '新增' (add) and '更新' (update) components indicate creation and modification of data.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

feishu_bitable Rate-limited

feishu_bitable stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "feishu_bitable": {
      "limits": [
        {
          "counter": "feishu_bitable_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Feishu, so you can run agents against it safely.

FAQ

Questions about feishu_bitable

What does the feishu_bitable tool do? +

读写飞书多维表格数据（新增/查询/更新记录）. It is categorised as a Write tool in the Feishu MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on feishu_bitable? +

Register the Feishu MCP server in PolicyLayer and add a rule for feishu_bitable: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Feishu. Nothing to install.

What risk level is feishu_bitable? +

feishu_bitable is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit feishu_bitable? +

Yes. Add a rate_limit block to the feishu_bitable rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block feishu_bitable completely? +

Set action: deny in the PolicyLayer policy for feishu_bitable. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides feishu_bitable? +

feishu_bitable is provided by the Feishu MCP server (zlplzp123wyt/feishu-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.