moodle_get_notifications

What moodle_get_notifications does on Moodle

AI agents call moodle_get_notifications to retrieve information from Moodle without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why moodle_get_notifications is rated Low

This tool performs a simple data retrieval operation on notifications, comparable to fetching inbox items. There is no capability to modify, delete, execute commands, or trigger external actions. The blast radius of misuse is minimal—an attacker could only view the user's notifications, not alter grades, delete assignments, or access sensitive system functions. This is a straightforward Read operation.

From the tool's definition Tool retrieves notifications (grade returns, assignment feedback, forum replies) with no modification or side effects. The verb 'Get' and the passive nature of notification retrieval indicate a query operation that only reads existing data.

The rule that runs moodle_get_notifications safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Moodle, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For moodle_get_notifications, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "moodle_get_notifications": {}
  }
}

Questions about moodle_get_notifications