getRemoteCodebase

What getRemoteCodebase does on Codebase MCP

AI agents call getRemoteCodebase to retrieve information from Codebase MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why getRemoteCodebase is rated Low

This tool retrieves/queries data from a remote source (GitHub repository) with no capability to modify, delete, or execute code. It is a passive data retrieval operation, fitting the Read category definition of 'retrieves or queries data; no side effects'. Severity is low because the blast radius is limited to information exposure of already-public repository code.

From the tool's definition Tool description states 'Retrieve a remote repository' - a read-only operation that fetches codebase content without modifying or deleting anything. No side effects beyond retrieving data.

The rule that runs getRemoteCodebase safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Codebase MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For getRemoteCodebase, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "getRemoteCodebase": {}
  }
}

Questions about getRemoteCodebase