canvas_get_course_enrollment_counts

What canvas_get_course_enrollment_counts does on Cowork Bench

AI agents call canvas_get_course_enrollment_counts to retrieve information from Cowork Bench without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why canvas_get_course_enrollment_counts is rated Low

This tool retrieves enrollment statistics through a server-side aggregate query. The verb 'Get' and the description clearly indicate a read-only operation that queries existing data. There are no side effects, modifications, or destructive operations. The low severity reflects that unauthorized access to enrollment counts has limited immediate impact compared to other risk categories.

From the tool's definition Tool name 'canvas_get_course_enrollment_counts' and description 'Get enrollment counts for a course, grouped by (enrollment type, enrollment_state) — server-side aggregate' indicate a retrieval operation that queries and returns aggregated enrollment data…

The rule that runs canvas_get_course_enrollment_counts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cowork Bench, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For canvas_get_course_enrollment_counts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "canvas_get_course_enrollment_counts": {}
  }
}

Questions about canvas_get_course_enrollment_counts