github_list_stargazers

What github_list_stargazers does on Github

AI agents call github_list_stargazers to retrieve information from Github without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why github_list_stargazers is rated Low

This tool retrieves and displays information about users who starred a repository. It is a read-only operation with no capability to create, modify, delete, or execute any actions. The data returned is typically public information on GitHub. The blast radius of misuse is minimal—an agent could only enumerate stargazers, which poses no security or operational risk.

From the tool's definition Tool name 'github_list_stargazers' and description 'List users who starred the repo' indicate a query operation that retrieves public GitHub stargazer data with no modification or side effects.

The rule that runs github_list_stargazers safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_list_stargazers, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_list_stargazers": {}
  }
}

Questions about github_list_stargazers