getInterceptInfo

What getInterceptInfo does on Whistle

AI agents call getInterceptInfo to retrieve information from Whistle without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why getInterceptInfo is rated Low

This tool retrieves network intercept data from the Whistle proxy server. While it only reads data without modifying or deleting it (classifying as 'Read'), the severity is elevated to 'medium' because intercepted request/response data can include sensitive information such as authentication tokens, personal data, API keys, and credentials.

From the tool's definition Tool name 'getInterceptInfo' and description indicating it retrieves/queries intercept information (requests/responses in base64 encoding) with no modification capability mentioned

The rule that runs getInterceptInfo safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Whistle, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For getInterceptInfo, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "getInterceptInfo": {}
  }
}

Questions about getInterceptInfo