# agentbrush_list_references

Browse reference images available in the project brand identity folder (.agentbrush/references/). Returns a list of image files with their filenames, tags, descriptions, and absolute paths, merged from identity.json.references[] manifest entries and any additional image files found on disk. Call this before agentbrush_generate when the user mentions a style, brand, or visual reference, so you can pick the most relevant images to include in the generation request. Optional tags parameter filters by tag (OR semantics, case-insensitive): { tags: ["hero", "logo"] } returns entries tagged with either "hero" or "logo". Omit the parameter to see every reference. Returns metadata only — no image bytes. No authentication required.

Agent View of the PolicyLayer registry record for `agentbrush_list_references`. HTML page: https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-list-references

## Facts

- Tool: `agentbrush_list_references`
- Server: Mcp Server (`@agentbrush/mcp-server`) — https://policylayer.com/tools/dev-agentbrush-mcp-server.md
- Install: `npx -y @agentbrush/mcp-server`
- Homepage: https://www.npmjs.com/package/@agentbrush/mcp-server
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 1
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `tags` | array | no | Optional: filter references by tags. OR semantics — an entry matches if it has any of the provided tags (case-insensitive). Omit to list all references. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "agentbrush_list_references",
    "arguments": {}
  }
}
```

## Why agentbrush_list_references is rated Low

This tool purely queries and retrieves metadata about existing reference images from the project's brand identity folder. It has no capability to create, modify, delete, or execute operations—it simply enumerates files and returns information. The optional tags parameter is a filter, not a write operation. Blast radius if misused is minimal: an AI could only over-query or retrieve unnecessary data.

From the tool's own definition: "Tool description states it 'Browse[s] reference images' and 'Returns a list of image files with their filenames, tags, descriptions, and absolute paths'. The verb 'list' and 'browse' indicate read-only retrieval operations with no modification or side effects."

Risk signals: Bulk/mass operation — affects multiple targets

## Use case

AI agents call agentbrush_list_references to retrieve information from Mcp Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Mcp Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "agentbrush_list_references": {}
  }
}
```

## Other tools on Mcp Server (11)

- `agentbrush_remove_background` — Destructive — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-remove-background.md
- `agentbrush_edit_mask` — Execute — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-edit-mask.md
- `agentbrush_edit_mask_open` — Execute — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-edit-mask-open.md
- `agentbrush_check_status` — Read — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-check-status.md
- `agentbrush_list_presets` — Read — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-list-presets.md
- `agentbrush_edit_mask_result` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-edit-mask-result.md
- `agentbrush_generate` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-generate.md
- `agentbrush_init` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-init.md
- `agentbrush_login` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-login.md
- `agentbrush_populate_identity` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-populate-identity.md
- `agentbrush_save_as_reference` — Write — https://policylayer.com/tools/dev-agentbrush-mcp-server/agentbrush-save-as-reference.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=dev-agentbrush-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/dev-agentbrush-mcp-server