find_nodes

What find_nodes does on Cocos

AI agents call find_nodes to retrieve information from Cocos without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why find_nodes is rated Low

This tool searches for nodes matching a name pattern in the Cocos Creator scene hierarchy. It is a retrieval operation that queries existing data and returns results without creating, modifying, deleting, or executing anything. The blast radius of misuse is minimal—an agent could only retrieve node information it shouldn't access, which is a low-severity information disclosure risk.

From the tool's definition Tool name 'find_nodes' and description 'Find nodes by name pattern' indicate a search/query operation with no side effects. The verb 'find' is a classic Read operation that retrieves data without modification.

The rule that runs find_nodes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cocos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For find_nodes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "find_nodes": {}
  }
}

Questions about find_nodes