get_document_text

What get_document_text does on Hwpx

AI agents call get_document_text to retrieve information from Hwpx without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_document_text is rated Low

This tool retrieves document content. While it accesses potentially sensitive data (especially when PII masking is disabled via mask=False), it performs no write, execute, or destructive operations. The ability to mask PII suggests awareness of sensitivity but confirms the operation is pure retrieval.

From the tool's definition Tool name is 'get_document_text' with description stating '조회합니다' (retrieve/query). Returns document text without modification. The optional PII masking parameter indicates data retrieval with optional filtering, not data creation or deletion.

The rule that runs get_document_text safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Hwpx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_document_text, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_document_text": {}
  }
}

Questions about get_document_text