get_form_response

What get_form_response does on VaultAssist

AI agents call get_form_response to retrieve information from VaultAssist without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_form_response is rated Low

This tool retrieves and queries form response data from Google Forms without modifying, deleting, or executing any operations. It is a straightforward read operation that returns existing data. The blast radius of misuse is minimal—an attacker could read form responses but cannot modify forms, trigger actions, or cause destructive changes. Low severity reflects the read-only nature and limited impact.

From the tool's definition Tool name 'get_form_response' and description 'Get a single response from a Google Form' indicate retrieval of data with no side effects.

The rule that runs get_form_response safely

PolicyLayer is an MCP gateway: it sits between your AI agents and VaultAssist, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_form_response, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_form_response": {}
  }
}

Questions about get_form_response