database_list

What database_list does on Aapanel

AI agents call database_list to retrieve information from Aapanel without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why database_list is rated Low

This tool performs a read-only operation that lists existing databases. It has no side effects, does not modify data, execute code, or cause destructive changes. The blast radius is minimal—an attacker gains knowledge of database names but cannot alter or delete them. Severity is low because this is information disclosure of infrastructure details that may aid reconnaissance but causes no direct damage.

From the tool's definition Tool name 'database_list' and description 'List all databases on the panel' indicate a query operation that retrieves information without modification.

The rule that runs database_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For database_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "database_list": {}
  }
}

Questions about database_list