cdp_get_customer_identities

What cdp_get_customer_identities does on CDP MCP Server

AI agents call cdp_get_customer_identities to retrieve information from CDP MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cdp_get_customer_identities is rated Low

This tool retrieves customer identity data without creating, modifying, deleting, or executing operations. It is a read-only query. Severity is medium rather than low because customer identity data is sensitive PII that could be misused if an AI agent retrieves identities for unauthorized customers, but the tool itself performs no destructive or financial operations.

From the tool's definition Tool name 'cdp_get_customer_identities' and description 'Get all identities associated with given customer IDs' indicate a retrieval operation with no modification or side effects.

The rule that runs cdp_get_customer_identities safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CDP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cdp_get_customer_identities, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cdp_get_customer_identities": {}
  }
}

Questions about cdp_get_customer_identities