container_files_list

What container_files_list does on Cloudflare

AI agents call container_files_list to retrieve information from Cloudflare without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why container_files_list is rated Low

This tool only lists/queries files in a directory tree without creating, modifying, or deleting any data. It has no side effects and falls clearly into the Read category. Severity is low because directory enumeration poses minimal risk even if misused by an agent, though it could inform reconnaissance in a broader attack. The confidence is high because the intent is unambiguous.

From the tool's definition Tool name 'container_files_list' and description 'List the working-directory file tree' indicate a read-only operation that retrieves directory structure without modification.

The rule that runs container_files_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cloudflare, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For container_files_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "container_files_list": {}
  }
}

Questions about container_files_list