get_workspace

What get_workspace does on Code MCP Server

AI agents call get_workspace to retrieve information from Code MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_workspace is rated Low

This tool retrieves metadata about the workspace configuration. It performs a simple query operation that returns existing information without creating, modifying, deleting, or executing any operations. The blast radius of misuse is minimal—an attacker could only learn the workspace path, which is already accessible through normal means. This is a straightforward Read operation.

From the tool's definition Tool name 'get_workspace' and description 'Get current workspace path' indicate a retrieval operation with no side effects. Returns information about the current working directory without modifying any state.

The rule that runs get_workspace safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Code MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_workspace, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_workspace": {}
  }
}

Questions about get_workspace