search_workitems

What search_workitems does on Alibabacloud Devops

AI agents call search_workitems to retrieve information from Alibabacloud Devops without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_workitems is rated Low

This tool searches and retrieves work items based on filter criteria. Search operations are read-only with no side effects, reversible actions, code execution, data destruction, or financial implications. The blast radius of misuse is minimal—worst case an agent queries sensitive project data it shouldn't access, but the tool itself cannot create, modify, or destroy data.

From the tool's definition Tool name 'search_workitems' and description '[Project Management] Search work items with various filter conditions' indicate a query/search operation that retrieves data without modifying or deleting anything.

The rule that runs search_workitems safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Alibabacloud Devops, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_workitems, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_workitems": {}
  }
}

Questions about search_workitems