search_zendesk_users

What search_zendesk_users does on Freshdesk

AI agents call search_zendesk_users to retrieve information from Freshdesk without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_zendesk_users is rated Low

This tool queries existing user data without creating, modifying, deleting, or executing any operations. It has minimal blast radius even if misused by an AI agent, as it only exposes publicly queryable user information in a support system. Severity is low because unauthorized user enumeration is a common and generally low-impact risk in ticketing systems.

From the tool's definition Tool description states 'Search Zendesk users by name, email, or query' — a retrieval operation with no modification or deletion. The verb 'search' and the read-only nature of querying user information confirms this is a Read category tool.

The rule that runs search_zendesk_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Freshdesk, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_zendesk_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_zendesk_users": {}
  }
}

Questions about search_zendesk_users