get-all-config

What get-all-config does on Frontmcp

AI agents call get-all-config to retrieve information from Frontmcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get-all-config is rated Low

This is a Read operation as it queries and retrieves environment variables. However, severity is elevated to 'medium' rather than 'low' because environment variables often contain sensitive information such as API keys, credentials, database connection strings, secrets, and other confidential configuration that could be exploited if exposed to an AI agent.

From the tool's definition Tool name 'get-all-config' and description 'Get all environment variables (returns count, keys, and a sample)' indicate retrieval of configuration data without modification or deletion.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs get-all-config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Frontmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get-all-config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get-all-config": {}
  }
}

Questions about get-all-config