find_definition

What find_definition does on Ripple-MCP

AI agents call find_definition to retrieve information from Ripple-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why find_definition is rated Low

This tool performs static analysis to locate and retrieve information about where symbols are defined in source code. It does not execute code, modify data, delete anything, or move data. It is a read-only query operation that retrieves semantic information from the codebase for impact analysis purposes. The low severity reflects that misuse would only expose code structure information, not cause harm.

From the tool's definition Tool description states it 'finds where a symbol is defined in a project' (function definitions, class definitions, module/class-level assignments).

The rule that runs find_definition safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ripple-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For find_definition, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "find_definition": {}
  }
}

Questions about find_definition