hash_keys

What hash_keys does on AWS

AI agents call hash_keys to retrieve information from AWS without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why hash_keys is rated Low

This tool performs a read-only query operation that retrieves field names from a hash data structure. It has no side effects, does not modify data, and does not execute code or commands. The minimal blast radius from misuse would be exposure of field names, which is low-severity information disclosure. The high confidence reflects the clear read-only semantics in the description.

From the tool's definition Tool description states 'Get all field names from hash' with return value 'List of field names or error message'. The operation retrieves metadata about a hash structure without modifying, deleting, or executing code.

The rule that runs hash_keys safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AWS, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For hash_keys, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "hash_keys": {}
  }
}

Questions about hash_keys