check_changedetection

What check_changedetection does on Mcp Nettools

AI agents call check_changedetection to retrieve information from Mcp Nettools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why check_changedetection is rated Low

This tool queries server metadata and health status without modifying, executing, or deleting anything. It is a pure information retrieval operation (Read category). The blast radius is minimal—an attacker could learn the server version, which poses a low severity risk since it only exposes informational data that could inform further reconnaissance but causes no direct harm.

From the tool's definition Tool performs a GET request to retrieve system information (version) from a changedetection.io server. The description explicitly states 'Returns version' and uses GET /api/v1/systeminfo, which is a read-only health check operation with no side effects.

The rule that runs check_changedetection safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Nettools, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For check_changedetection, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "check_changedetection": {}
  }
}

Questions about check_changedetection