github_list_workflow_runs

What github_list_workflow_runs does on Github

AI agents call github_list_workflow_runs to retrieve information from Github without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why github_list_workflow_runs is rated Low

This tool retrieves and displays workflow run information from GitHub without modifying, executing, or deleting any data. It follows the pattern of Read category tools (list, get, fetch). The low severity reflects that listing workflow runs poses minimal risk—it merely exposes existing metadata that an authenticated user can already access.

From the tool's definition Tool name 'github_list_workflow_runs' indicates a query/listing operation. The verb 'list' is a retrieval action with no side effects. No description provided, but the naming convention is clear and consistent with read-only operations.

The rule that runs github_list_workflow_runs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_list_workflow_runs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_list_workflow_runs": {}
  }
}

Questions about github_list_workflow_runs