query_server_ip_list

What query_server_ip_list does on Cocos

AI agents call query_server_ip_list to retrieve information from Cocos without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why query_server_ip_list is rated Low

This tool performs a read-only query operation to retrieve a list of server IP addresses. It has no side effects, does not execute code or commands, does not modify data, and does not delete anything. The blast radius of misuse is minimal—an AI agent could only retrieve IP information, which is a low-severity information disclosure risk in the context of a local Cocos Creator editor server.

From the tool's definition Tool name 'query_server_ip_list' and description 'Query server IP list' indicate a retrieval operation that queries and returns information about server IPs without modifying, executing, or destructing any data.

The rule that runs query_server_ip_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cocos, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For query_server_ip_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "query_server_ip_list": {}
  }
}

Questions about query_server_ip_list