docker_logs

What docker_logs does on Terminal Guardian

AI agents call docker_logs to retrieve information from Terminal Guardian without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why docker_logs is rated Low

This tool retrieves log data from Docker containers, which is a non-destructive query operation. It has no side effects on the container, system, or data. While logs may contain sensitive information, the tool itself only reads and returns existing data. The severity is low because exposure of this tool allows information gathering only, not code execution or data modification.

From the tool's definition Tool name 'docker_logs' and description 'Retrieve logs from a Docker container' indicate a read-only operation that queries existing log data without modification or execution.

The rule that runs docker_logs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Terminal Guardian, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For docker_logs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "docker_logs": {}
  }
}

Questions about docker_logs