curl_get

What curl_get does on Curl MCP Server

AI agents call curl_get to retrieve information from Curl MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why curl_get is rated Low

HTTP GET requests are inherently read operations that retrieve data without side effects. However, severity is medium rather than low because curl requests can interact with arbitrary URLs and APIs, which could leak sensitive data, cause information disclosure, or be used for reconnaissance if the AI agent is compromised or given malicious instructions.

From the tool's definition HTTP GET request uses curl to retrieve data from web APIs and content without modifying state. The sibling tools (curl_post, curl_put, curl_delete) confirm curl_get is the read operation.

The rule that runs curl_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Curl MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For curl_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "curl_get": {}
  }
}

Questions about curl_get