gcp_monitoring_get_metric_descriptor

What gcp_monitoring_get_metric_descriptor does on GCP MCP Server

AI agents call gcp_monitoring_get_metric_descriptor to retrieve information from GCP MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gcp_monitoring_get_metric_descriptor is rated Low

This tool queries and retrieves metric descriptor details from GCP Cloud Monitoring. It performs a read-only operation with no side effects, no code execution, and no data modification. The blast radius if misused is minimal—an agent could enumerate metrics but cannot modify monitoring rules, alter data pipelines, or trigger external operations. Confidence is high because the language is unambiguous.

From the tool's definition Tool name includes 'get' and description states 'Get details of a metric descriptor' — both indicate retrieval of monitoring metadata with no modification or execution.

The rule that runs gcp_monitoring_get_metric_descriptor safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GCP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gcp_monitoring_get_metric_descriptor, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gcp_monitoring_get_metric_descriptor": {}
  }
}

Questions about gcp_monitoring_get_metric_descriptor