check_elevation

What check_elevation does on Procmon

AI agents call check_elevation to retrieve information from Procmon without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why check_elevation is rated Low

This tool queries and returns elevation status and capability information. It performs no side effects, creates no data modifications, executes no code, and performs no destructive operations. It is purely informational—a status check that returns data about the server's current privilege level and what tools can do. This is a classic Read operation (get/fetch pattern).

From the tool's definition Tool name 'check_elevation' and description 'Whether the server is elevated plus a capability matrix for all tools' indicate a read-only query that retrieves status information and displays a capability matrix without modifying, executing, or deleting…

The rule that runs check_elevation safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Procmon, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For check_elevation, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "check_elevation": {}
  }
}

Questions about check_elevation