gf_get_entries

What gf_get_entries does on WordPress MCP Server

AI agents call gf_get_entries to retrieve information from WordPress MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gf_get_entries is rated Low

This tool queries and retrieves form submission entries from Gravity Forms. It performs a read-only operation (get/fetch) on existing data without creating, modifying, deleting, or executing actions. The German description confirms it retrieves ('Ruft...ab') entries without altering them. Blast radius is limited to potential exposure of form data, which is a standard read risk.

From the tool's definition Tool name 'gf_get_entries' and description 'Ruft Einträge eines Gravity Forms Formulars ab' (retrieves entries from a Gravity Forms form) indicates data retrieval with no modification or side effects.

The rule that runs gf_get_entries safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WordPress MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gf_get_entries, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gf_get_entries": {}
  }
}

Questions about gf_get_entries