dns_lookup

What dns_lookup does on Terminal Guardian

AI agents call dns_lookup to retrieve information from Terminal Guardian without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why dns_lookup is rated Low

DNS lookup is a standard read-only operation that queries a nameserver to retrieve IP address mappings. It does not modify data, execute code, delete resources, or commit financial transactions. The operation has minimal blast radius even if misused—an attacker could enumerate hostnames or gather reconnaissance information, but cannot directly compromise systems or cause irreversible harm through this tool alone.

From the tool's definition Tool name 'dns_lookup' and description 'Resolve a hostname to IP addresses using DNS' indicate a query operation that retrieves network information without modification or side effects.

The rule that runs dns_lookup safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Terminal Guardian, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dns_lookup, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dns_lookup": {}
  }
}

Questions about dns_lookup