list_hosts

What list_hosts does on Ebay

AI agents call list_hosts to retrieve information from Ebay without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_hosts is rated Low

This tool performs a read-only operation that returns information about configured hosts and their statuses. There are no side effects, no data modification, no code execution, and no financial impact. It is a simple informational query, making it a Read category tool with low severity since the blast radius of misuse is minimal—an attacker could only learn about host configurations but not modify or delete them.

From the tool's definition Tool name 'list_hosts' with description 'List every configured host with its status (default flag and cert availability)' indicates a retrieval operation that queries configuration data without modifying or executing anything.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs list_hosts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ebay, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_hosts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_hosts": {}
  }
}

Questions about list_hosts