list_trash

What list_trash does on AIquila — Nextcloud MCP Server

AI agents call list_trash to retrieve information from AIquila — Nextcloud MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_trash is rated Low

This tool performs a read-only query of trash/recycle bin contents. It has no side effects, does not permanently delete data, execute code, or modify system state. The blast radius of misuse is minimal—an attacker gains visibility into deleted files but cannot perform further destructive actions with this tool alone. Confidence is high because the name and description are explicit and unambiguous.

From the tool's definition Tool name is 'list_trash' and description states 'List files in the trash / recycle bin' — this is a retrieval operation that queries existing trash contents without modifying, deleting, or executing anything.

The rule that runs list_trash safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AIquila — Nextcloud MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_trash, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_trash": {}
  }
}

Questions about list_trash