cdp_get_provision_instance

What cdp_get_provision_instance does on CDP MCP Server

AI agents call cdp_get_provision_instance to retrieve information from CDP MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cdp_get_provision_instance is rated Low

This tool retrieves information about a provisioned instance without any side effects. It fits the 'Read' category as a get/fetch operation. Severity is low because accessing instance metadata poses minimal risk even if misused by an AI agent, as it only retrieves existing data without enabling destructive or financial actions. Confidence is high due to clear, unambiguous function signature.

From the tool's definition Tool name and description indicate retrieval operation: 'Get a specific provisioned instance by ID' - a straightforward data query with no modification, deletion, or execution of external operations.

The rule that runs cdp_get_provision_instance safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CDP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cdp_get_provision_instance, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cdp_get_provision_instance": {}
  }
}

Questions about cdp_get_provision_instance