query_asset_url

What query_asset_url does on Cocos

AI agents call query_asset_url to retrieve information from Cocos without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why query_asset_url is rated Low

This tool performs a simple lookup operation—converting a UUID to an asset URL. It retrieves information without creating, modifying, deleting, or executing anything. The operation is read-only and has minimal blast radius even if misused by an agent, as it only exposes existing asset URLs that are likely already discoverable through the editor.

From the tool's definition Tool name 'query_asset_url' with description 'Get asset URL from UUID' indicates a retrieval operation that queries and returns data (asset URL) based on an identifier, with no modification or side effects.

The rule that runs query_asset_url safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cocos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For query_asset_url, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "query_asset_url": {}
  }
}

Questions about query_asset_url