list_application_auth_methods

What list_application_auth_methods does on CyberArk Privilege Cloud MCP Server

AI agents call list_application_auth_methods to retrieve information from CyberArk Privilege Cloud MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_application_auth_methods is rated Low

This tool retrieves and queries authentication method configurations for an application. It has no side effects, does not modify data, execute code, delete resources, or commit financial transactions. While it may expose sensitive configuration details about authentication methods (which could have downstream security implications), the tool itself performs only a harmless data retrieval operation.

From the tool's definition Tool name 'list_application_auth_methods' and description 'List authentication methods for a specific application' indicate a read-only query operation that retrieves configuration data without modification, deletion, or execution of privileged operations.

The rule that runs list_application_auth_methods safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CyberArk Privilege Cloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_application_auth_methods, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_application_auth_methods": {}
  }
}

Questions about list_application_auth_methods