list_my_resources

What list_my_resources does on FlowDot MCP Server

AI agents call list_my_resources to retrieve information from FlowDot MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_my_resources is rated Low

This tool queries and returns information about the current user's resources with no side effects, modifications, or state changes. It is a straightforward data retrieval operation with minimal security risk to the user or system. The low severity reflects that exposing user resource listings has limited blast radius compared to write, execute, or destructive operations.

From the tool's definition Tool name 'list_my_resources' and description 'List the current user' indicate this retrieves user account or resource information without modification. The verb 'list' is explicitly identified as a Read operation in the classification rules.

The rule that runs list_my_resources safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FlowDot MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_my_resources, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_my_resources": {}
  }
}

Questions about list_my_resources