list_my_assets

What list_my_assets does on 3dawn

AI agents call list_my_assets to retrieve information from 3dawn without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_my_assets is rated Low

This is a straightforward data retrieval operation. It queries and returns information about assets owned by a wallet, similar to a GET request in REST APIs. There is no capability to modify, delete, or trigger external operations. The blast radius of misuse is minimal — an attacker could learn what assets a wallet owns, but cannot modify or damage them. Classified as Read with low severity.

From the tool's definition Tool name and description explicitly state 'List' and 'query assets' — retrieves or queries data with no side effects. The function lists existing 3D assets owned by a wallet address without creating, modifying, deleting, or executing operations.

The rule that runs list_my_assets safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 3dawn, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_my_assets, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_my_assets": {}
  }
}

Questions about list_my_assets