search_password_files

What search_password_files does on EMBA-MCP

AI agents call search_password_files to retrieve information from EMBA-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_password_files is rated Low

This tool retrieves or queries data (password files) without modifying or executing anything. It falls under Read category. Severity is medium because unauthorized disclosure of password files could expose credentials, though the tool itself performs no destructive action. Confidence is 0.85 rather than higher because the description is empty; the classification relies primarily on the tool name and server context.

From the tool's definition Tool name 'search_password_files' indicates it searches for or retrieves password-related files. The sibling tool 'get_credentials_and_secrets' on the same server confirms this server handles sensitive credential discovery.

The rule that runs search_password_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and EMBA-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_password_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_password_files": {}
  }
}

Questions about search_password_files