evidence_get_labels

What evidence_get_labels does on AbraFlexi

AI agents call evidence_get_labels to retrieve information from AbraFlexi without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why evidence_get_labels is rated Low

This tool retrieves and queries existing labels assigned to records without modifying, creating, or deleting data. It is a straightforward read operation with minimal security risk. The word 'Get' in the name and the retrieval nature of the operation confirm the Read category. Severity is low because it only exposes label metadata with no destructive potential, and the blast radius of misuse is minimal.

From the tool's definition Tool name 'evidence_get_labels' and description 'Get all labels (stitky) currently assigned to a record' indicate a retrieval operation with no side effects.

The rule that runs evidence_get_labels safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AbraFlexi, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For evidence_get_labels, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "evidence_get_labels": {}
  }
}

Questions about evidence_get_labels