cdp_list_column_validators

What cdp_list_column_validators does on CDP MCP Server

AI agents call cdp_list_column_validators to retrieve information from CDP MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cdp_list_column_validators is rated Low

This tool retrieves and displays existing column validator configurations for a CDP tenant. It performs no modifications, deletions, or external operations. The blast radius of misuse is minimal—an unauthorized actor gains visibility into validator rules but cannot alter them or access sensitive data beyond what validators are configured.

From the tool's definition Tool name 'cdp_list_column_validators' and description 'List column validators for a tenant' indicate a retrieval/query operation with no side effects. The 'list' verb and lack of any modification language confirm this is a read-only action.

The rule that runs cdp_list_column_validators safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CDP MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cdp_list_column_validators, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cdp_list_column_validators": {}
  }
}

Questions about cdp_list_column_validators