scan_documents

What scan_documents does on Daniel LightRAG MCP Server

AI agents call scan_documents to retrieve information from Daniel LightRAG MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why scan_documents is rated Low

This tool performs a scanning/enumeration operation to identify new documents in the system. It retrieves or discovers data without creating, modifying, executing code, deleting, or moving funds. Scanning is a non-destructive read operation with minimal blast radius—the worst outcome is wasted resources or information disclosure.

From the tool's definition Tool name 'scan_documents' and description 'Scan for new documents in LightRAG' indicate a query/discovery operation. 'Scan' and 'check for' are read-only operations that detect and retrieve information about documents without modifying or executing anything.

The rule that runs scan_documents safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Daniel LightRAG MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For scan_documents, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "scan_documents": {}
  }
}

Questions about scan_documents