whoami

What whoami does on FeatureJet

AI agents call whoami to retrieve information from FeatureJet without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why whoami is rated Low

This tool retrieves information about which boards are accessible to the authenticated user. It performs a read-only query operation with no modifications, deletions, or external side effects. The severity is low because it only reveals information already known to the authenticated user about their own permissions. The confidence is high due to the clear read-only nature of the operation.

From the tool's definition Tool name 'whoami' and description 'Confirm the caller's API key by listing accessible boards' indicates this retrieves/queries data about accessible boards with no side effects.

The rule that runs whoami safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FeatureJet, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For whoami, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "whoami": {}
  }
}

Questions about whoami