get_map_device_points

What get_map_device_points does on AIquila — Nextcloud MCP Server

AI agents call get_map_device_points to retrieve information from AIquila — Nextcloud MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_map_device_points is rated Low

This tool retrieves GPS location data, which is a Read operation. However, severity is elevated to 'medium' because GPS location data is sensitive personal information—unauthorized access could enable tracking or privacy violations. The tool itself performs no destructive or financial action, but the data it exposes has significant privacy implications if misused by an agent without proper authorization checks.

From the tool's definition Tool name 'get_map_device_points' and description 'Get GPS location points for a specific device' indicate data retrieval with no modification. The mention of 'time filtering and pagination' confirms a query/fetch operation with no side effects.

The rule that runs get_map_device_points safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AIquila — Nextcloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_map_device_points, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_map_device_points": {}
  }
}

Questions about get_map_device_points