# list_drugs

List all available digital drugs that can modify agent behavior

Agent View of the PolicyLayer registry record for `list_drugs`. HTML page: https://policylayer.com/tools/2389-research-agent-drugs/list-drugs

## Facts

- Tool: `list_drugs`
- Server: Agent Drugs (`2389-research/agent-drugs`) — https://policylayer.com/tools/2389-research-agent-drugs.md
- Homepage: https://github.com/2389-research/agent-drugs
- Risk category: Read (Low risk)
- Registry record: grade A, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "list_drugs",
    "arguments": {}
  }
}
```

## Why list_drugs is rated Low

Despite the concerning domain (prompt injection to modify AI behavior), the tool itself performs only information retrieval. It lists available drugs but does not activate, apply, or alter any agent state. The actual risk would come from sibling tools like 'take_drug' that trigger the modifications. Listing available options is a Read operation.

From the tool's own definition: "Tool name is 'list_drugs' with description 'List all available digital drugs that can modify agent behavior' — this is a query/retrieval operation that returns a list of available items with no side effects."

## Use case

AI agents call list_drugs to retrieve information from Agent Drugs without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Agent Drugs:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_drugs": {}
  }
}
```

## Other tools on Agent Drugs (2)

- `take_drug` — Execute — https://policylayer.com/tools/2389-research-agent-drugs/take-drug.md
- `active_drugs` — Read — https://policylayer.com/tools/2389-research-agent-drugs/active-drugs.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=2389-research-agent-drugs · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/2389-research-agent-drugs