lichess_user_games

What lichess_user_games does on UnClick

AI agents call lichess_user_games to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why lichess_user_games is rated Low

This tool retrieves historical game information from Lichess (a chess platform), which is a read-only operation with no side effects. It queries and returns data without altering it, creating financial obligations, or executing arbitrary operations. The blast radius is minimal—at worst, the AI agent could retrieve games for unintended users, but this causes no lasting harm given the data is public and immutable.

From the tool's definition Tool name 'lichess_user_games' and description 'Get games for a Lichess user' indicate retrieval of publicly available game data with no modification, deletion, or execution of code.

Risk signalsHandles credentials or secrets (api_key)

The rule that runs lichess_user_games safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For lichess_user_games, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "lichess_user_games": {}
  }
}

Questions about lichess_user_games