bigquery_get_table_schema

What bigquery_get_table_schema does on Deloc

AI agents call bigquery_get_table_schema to retrieve information from Deloc without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why bigquery_get_table_schema is rated Low

This is a read-only operation that retrieves table schema metadata from BigQuery. While it could expose sensitive schema information (column names/types) that might hint at data sensitivity or structure, it does not modify, delete, or execute arbitrary code. The 'medium' severity reflects that schema metadata exposure could inform a more targeted attack, but the direct risk is informational rather than operational.

From the tool's definition Tool description states 'Get the column names and types of a BigQuery table' — a retrieval operation with no mutation. The action is to query and return metadata about a table's schema.

The rule that runs bigquery_get_table_schema safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Deloc, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bigquery_get_table_schema, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bigquery_get_table_schema": {}
  }
}

Questions about bigquery_get_table_schema