get_asset_url

What get_asset_url does on Businys

AI agents call get_asset_url to retrieve information from Businys without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_asset_url is rated Low

This tool retrieves a URL for an existing asset, enabling download access. It performs a query-like operation with no side effects, no data modification, no code execution, and no irreversible changes. The 'signed' URL mechanism is standard for secure but read-only access. Severity is low because misuse would only expose already-existing assets, not compromise system integrity or enable destructive actions.

From the tool's definition Tool name and description indicate retrieval operation: 'Get the public or signed download URL for a specific asset' — fetches a URL without modifying, deleting, or executing anything.

The rule that runs get_asset_url safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Businys, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_asset_url, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_asset_url": {}
  }
}

Questions about get_asset_url