get_origin_details

What get_origin_details does on Cloudflare

AI agents call get_origin_details to retrieve information from Cloudflare without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_origin_details is rated Low

This tool retrieves and returns metadata about cloud provider origins and their regions. The verb 'Get' and the absence of any modification, deletion, or execution language confirm this is a read-only operation with no side effects. The low severity reflects minimal blast radius—an AI agent misusing this would only access informational data about infrastructure details.

From the tool's definition Tool name 'get_origin_details' and description 'Get details for a specific cloud provider origin, including all available regions' indicate a retrieval operation that queries and returns information without modifying any data.

The rule that runs get_origin_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cloudflare, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_origin_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_origin_details": {}
  }
}

Questions about get_origin_details