list_domains

What list_domains does on 20i MCP Server

AI agents call list_domains to retrieve information from 20i MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_domains is rated Low

This tool performs a read-only operation that queries and returns a list of domains. It has no side effects, does not execute code or trigger external operations, does not modify data, and does not involve financial transactions. The blast radius of misuse is minimal—an attacker gains visibility into the domains associated with a reseller account but cannot modify or delete them.

From the tool's definition Tool name 'list_domains' and description 'List all domains in the reseller account' indicate a query operation that retrieves domain information without modifying or deleting data.

The rule that runs list_domains safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 20i MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_domains, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_domains": {}
  }
}

Questions about list_domains