list_directory

What list_directory does on MCP Filesystem Server

AI agents call list_directory to retrieve information from MCP Filesystem Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_directory is rated Low

list_directory reads and returns directory contents without altering any data or executing operations. It is a query operation analogous to 'ls' or 'dir'. Even in the context of a filesystem server with command execution capabilities elsewhere, this specific tool performs only information retrieval. Low severity reflects minimal blast radius: disclosure of file names and metadata is typically non-destructive.

From the tool's definition Tool description states it 'Get a detailed listing of all files and directories in a specified path' — a pure retrieval operation with no modification or side effects.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs list_directory safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Filesystem Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_directory, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_directory": {}
  }
}

Questions about list_directory