list_form_fields

What list_form_fields does on Hwpx

AI agents call list_form_fields to retrieve information from Hwpx without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_form_fields is rated Low

This tool retrieves and queries form field information from a document without creating, modifying, deleting, or executing any operations. It has no side effects and simply exposes existing document metadata. The low severity reflects minimal blast radius if misused—an agent can only discover what form fields exist and their current values.

From the tool's definition Tool name 'list_form_fields' and description indicate it 'returns a list of native form fields and current values' (documents the form fields and their values). The verb 'list' and action of returning data without modification confirms read-only operation.

The rule that runs list_form_fields safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Hwpx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_form_fields, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_form_fields": {}
  }
}

Questions about list_form_fields