get_api_tags

What get_api_tags does on Postman

AI agents call get_api_tags to retrieve information from Postman without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_api_tags is rated Low

This tool retrieves metadata (tags) from an API resource in Postman. It performs no modifications, deletions, or external operations. The blast radius of misuse is minimal—an agent could only retrieve tag information already accessible to the authenticated user. This fits the 'Read' category as a simple query operation.

From the tool's definition Tool name 'get_api_tags' and description 'Get tags for an API' indicate a retrieval operation with no side effects. The verb 'get' and the read-only nature of querying tags confirm this is a data retrieval action.

The rule that runs get_api_tags safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Postman, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_api_tags, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_api_tags": {}
  }
}

Questions about get_api_tags