onedrive_root

What onedrive_root does on Local

AI agents call onedrive_root to retrieve information from Local without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why onedrive_root is rated Low

This tool performs a simple enumeration of existing OneDrive mount points on the system. It has no side effects, does not modify data, and does not execute code or commands. The blast radius of misuse is minimal; an attacker could learn what OneDrive directories are accessible but cannot directly access their contents, modify data, or cause damage through this tool alone. It is a straightforward Read operation.

From the tool's definition Tool description states 'Lists all mounted OneDrive directories' — a read-only operation that retrieves information about mounted directories without modification.

The rule that runs onedrive_root safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Local, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For onedrive_root, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "onedrive_root": {}
  }
}

Questions about onedrive_root