httpProtocol

What httpProtocol does on Mcp

AI agents call httpProtocol to retrieve information from Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why httpProtocol is rated Low

This tool retrieves information about HTTP protocol versions (HTTP/1.1, HTTP/2, HTTP/3, etc.) that a server supports. It performs network reconnaissance but does not execute arbitrary commands, modify data, delete resources, or move money. The operation is read-only and has no persistent side effects. Severity is low because the information gathered is typically public and its misuse has limited blast radius.

From the tool's definition Tool name is 'httpProtocol' and description states 'Detect HTTP protocol versions supported by a URL' — this is a passive detection/query of HTTP protocol support without modifying, executing code on, or damaging any target.

Risk signalsAccepts URL/endpoint input (url)

The rule that runs httpProtocol safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For httpProtocol, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "httpProtocol": {}
  }
}

Questions about httpProtocol