list_files

What list_files does on AIquila — Nextcloud MCP Server

AI agents call list_files to retrieve information from AIquila — Nextcloud MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why list_files is rated Low

This tool performs a retrieval operation on file system metadata within Nextcloud. It queries and returns information about files and folders but does not create, modify, delete, or execute any operations. The action is read-only with minimal blast radius even if misused by an AI agent, as it only exposes directory structure and file listings that may already be accessible to the authenticated user.

From the tool's definition Tool name is 'list_files' and description states 'List files and folders in a Nextcloud directory' — a query operation that retrieves directory contents without modification or side effects.

Risk signalsAccepts file system path (path)

The rule that runs list_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AIquila — Nextcloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_files": {}
  }
}

Questions about list_files