get_api_versions

What get_api_versions does on Postman

AI agents call get_api_versions to retrieve information from Postman without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_api_versions is rated Low

This tool retrieves API version information from Postman. There is no indication that it modifies, deletes, executes, or has financial impact. It is a straightforward data retrieval operation with minimal blast radius if misused by an AI agent—worst case it exposes version metadata that is typically non-sensitive or already discoverable.

From the tool's definition Tool name 'get_api_versions' and description 'Get all versions of an API' indicate a retrieval operation with no side effects. The verb 'get' is a classic read operation that queries and returns data without modification.

The rule that runs get_api_versions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Postman, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_api_versions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_api_versions": {}
  }
}

Questions about get_api_versions