get_user_organizations

What get_user_organizations does on Alibabacloud Devops

AI agents call get_user_organizations to retrieve information from Alibabacloud Devops without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_user_organizations is rated Low

This is a straightforward data retrieval operation that queries user organizational memberships. No data is created, modified, deleted, or executed. The blast radius of misuse is minimal—an attacker gains only informational access to organizational structure the user already belongs to, not unauthorized access to other users' data or systems. Classified as Read with low severity.

From the tool's definition Tool name 'get_user_organizations' and description 'Get the list of organizations the current user belongs to' clearly indicate a query/retrieval operation with no side effects. It fetches organizational membership data.

The rule that runs get_user_organizations safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Alibabacloud Devops, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_user_organizations, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_user_organizations": {}
  }
}

Questions about get_user_organizations