get-session-notifications

What get-session-notifications does on Frontmcp

AI agents call get-session-notifications to retrieve information from Frontmcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get-session-notifications is rated Low

This tool queries and returns notification data for a session. The verb 'get' and the passive voice 'received by' confirm it is a read-only operation that retrieves existing data without creating, modifying, deleting, or executing any operations. The severity is low because it accesses notification metadata rather than sensitive credentials or system controls.

From the tool's definition Tool name 'get-session-notifications' and description 'Get all channel notifications received by a specific session' indicate a retrieval operation with no mutation or side effects.

The rule that runs get-session-notifications safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Frontmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get-session-notifications, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get-session-notifications": {}
  }
}

Questions about get-session-notifications