audit_fetch_assessment_runs

What audit_fetch_assessment_runs does on ComplianceCow MCP Server

AI agents call audit_fetch_assessment_runs to retrieve information from ComplianceCow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why audit_fetch_assessment_runs is rated Low

This tool retrieves assessment data without modifying or executing actions. It poses a medium severity risk because compliance data may contain sensitive information about security posture, vulnerabilities, or control gaps that could be misused if exposed to unauthorized actors, but the operation itself is non-destructive and read-only.

From the tool's definition Tool name 'audit_fetch_assessment_runs' indicates retrieval of assessment run records; combined with server's stated purpose of enabling AI agents to 'retrieve compliance insights, dashboard data, and auditable evidence.' The 'fetch' verb and absence of…

The rule that runs audit_fetch_assessment_runs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ComplianceCow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For audit_fetch_assessment_runs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "audit_fetch_assessment_runs": {}
  }
}

Questions about audit_fetch_assessment_runs