list_organization_members

What list_organization_members does on Huly

AI agents call list_organization_members to retrieve information from Huly without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_organization_members is rated Low

This tool retrieves and lists organizational membership information with no side effects. It is purely informational (Read category). Severity is low because the blast radius of misuse is limited to information disclosure of non-sensitive member lists, which is typically already visible within organizational systems. High confidence due to clear read-only semantics evident in the name and description.

From the tool's definition Tool name 'list_organization_members' and description 'List all persons who are members of an organization. Returns each member' indicate a query operation that retrieves data without modification.

The rule that runs list_organization_members safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Huly, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_organization_members, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_organization_members": {}
  }
}

Questions about list_organization_members