cdp_describe_resources

What cdp_describe_resources does on CDP MCP Server

AI agents call cdp_describe_resources to retrieve information from CDP MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cdp_describe_resources is rated Low

This is a descriptive query operation that returns information about what resources exist in a Data Warehouse. It has no side effects, does not execute code or commands, does not modify data, and does not delete or move resources. The blast radius of misuse is minimal—an attacker could discover what tables exist but cannot access, modify, or harm data directly.

From the tool's definition Tool name 'cdp_describe_resources' and description 'List all available DW resources (tables/entities) for a tenant' indicate a retrieval operation that queries metadata about available data structures without modifying, executing, or deleting anything.

The rule that runs cdp_describe_resources safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CDP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cdp_describe_resources, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cdp_describe_resources": {}
  }
}

Questions about cdp_describe_resources