get_user_id

What get_user_id does on Sap Btp Destination

AI agents call get_user_id to retrieve information from Sap Btp Destination without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_user_id is rated Low

This tool appears to fetch user identification data from the SAP BTP system. It performs a query/retrieval operation with no side effects, no code execution, no destructive actions, and no financial operations. The low severity reflects that user ID retrieval alone has limited blast radius unless misused downstream in conjunction with other tools.

From the tool's definition Tool name 'get_user_id' indicates retrieval of user identity information with no modification capability. Description is empty, but naming convention and context within a BTP destination service server suggest this retrieves user identity data.

The rule that runs get_user_id safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sap Btp Destination, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_user_id, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_user_id": {}
  }
}

Questions about get_user_id