list_engagements

What list_engagements does on Pentest Ai

AI agents call list_engagements to retrieve information from Pentest Ai without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_engagements is rated Low

This tool retrieves and displays existing pentest engagement data without creating, modifying, deleting, or executing any operations. The filtering capability is a read-time parameter, not a modification action. The blast radius of misuse is limited to information disclosure about past or ongoing engagements, which is less severe than code execution or data destruction.

From the tool's definition Tool name 'list_engagements' and description 'List all pentest engagements, optionally filtered by status' indicate a query/retrieval operation with no mutation or side effects.

The rule that runs list_engagements safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentest Ai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_engagements, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_engagements": {}
  }
}

Questions about list_engagements