get_user

What get_user does on Codebeamer

AI agents call get_user to retrieve information from Codebeamer without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_user is rated Low

This tool retrieves user profile information by ID without creating, modifying, deleting, or executing anything. It is a straightforward data retrieval with no blast radius risk if misused by an AI agent, as it only exposes already-accessible user metadata. Severity is low because user profile data is typically non-sensitive in most ALM systems, and reading it poses minimal risk.

From the tool's definition Tool description explicitly states 'Get profile details' — a retrieval operation with no modification or side effects. The verb 'Get' and the passive action of querying user profile data confirm this is a read-only operation.

The rule that runs get_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Codebeamer, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_user": {}
  }
}

Questions about get_user