get_node_package_scripts

What get_node_package_scripts does on 1Panel MCP Server

AI agents call get_node_package_scripts to retrieve information from 1Panel MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_node_package_scripts is rated Low

This tool retrieves and lists Node.js package scripts, which is a read-only query operation with no side effects. It does not execute scripts, modify files, delete data, or perform financial operations. The blast radius of misuse is minimal—an attacker could only discover what scripts are available, not execute them or cause infrastructure damage. The low severity reflects the informational nature of the operation.

From the tool's definition Tool name 'get_node_package_scripts' and description 'Get Node package scripts (XPack)' indicate a retrieval operation that reads package.json or similar metadata to list available npm scripts without modifying them.

The rule that runs get_node_package_scripts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 1Panel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_node_package_scripts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_node_package_scripts": {}
  }
}

Questions about get_node_package_scripts