get_workflow_public_url

What get_workflow_public_url does on FlowDot MCP Server

AI agents call get_workflow_public_url to retrieve information from FlowDot MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_workflow_public_url is rated Low

This tool only retrieves and returns existing information about a workflow's public URL and sharing status. It does not create, modify, delete, or execute anything. There is no capability to change the workflow, alter its sharing settings, or trigger external operations. The blast radius of misuse is minimal—an AI agent could at worst learn which workflows are publicly shared, which is informational only.

From the tool's definition Tool name and description indicate a retrieval operation: 'Get the public shareable URL for a workflow' and 'Returns the URL'. The verb 'get' and the action of retrieving/returning information confirms this is a read operation with no side effects.

The rule that runs get_workflow_public_url safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FlowDot MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_workflow_public_url, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_workflow_public_url": {}
  }
}

Questions about get_workflow_public_url