claudeus_wp_widgets__get_widget

What claudeus_wp_widgets__get_widget does on Claudeus WordPress MCP

AI agents call claudeus_wp_widgets__get_widget to retrieve information from Claudeus WordPress MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why claudeus_wp_widgets__get_widget is rated Low

This tool retrieves widget information and renders HTML for display purposes. It performs a query operation with no capacity to modify, delete, or execute code. The blast radius of misuse is minimal—an attacker gains visibility into widget configuration but cannot alter site behavior or access sensitive data beyond what widgets already expose.

From the tool's definition Tool name contains 'get_widget' and description states 'Get a specific widget by ID. View widget type, settings, sidebar placement, and rendered HTML.' The verb 'Get' and 'View' indicate read-only retrieval with no modifications or side effects.

The rule that runs claudeus_wp_widgets__get_widget safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Claudeus WordPress MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For claudeus_wp_widgets__get_widget, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "claudeus_wp_widgets__get_widget": {}
  }
}

Questions about claudeus_wp_widgets__get_widget