read_workspace_file

What read_workspace_file does on PromptX

AI agents call read_workspace_file to retrieve information from PromptX without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why read_workspace_file is rated Low

This tool retrieves data (file text contents) without any side effects, modification, or destructive operations. It is a pure read operation scoped to workspace files. The low severity reflects that unauthorized file reads typically have limited immediate blast radius compared to write, execute, or destructive operations, though actual risk depends on file contents.

From the tool's definition Tool name is 'read_workspace_file' and description states '读取工作区中某个文件的文本内容' (reads text content of a file in the workspace). The description explicitly mentions reading/retrieving file contents with no modification, deletion, or execution capabilities.

The rule that runs read_workspace_file safely

PolicyLayer is an MCP gateway: it sits between your AI agents and PromptX, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For read_workspace_file, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "read_workspace_file": {}
  }
}

Questions about read_workspace_file