list_copilot_spaces

What list_copilot_spaces does on GitHub

AI agents call list_copilot_spaces to retrieve information from GitHub without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_copilot_spaces is rated Low

This tool queries and returns information about Copilot Spaces without modifying, creating, or deleting any data. It has no side effects and falls squarely within the Read category. The severity is low because accessing a list of available spaces poses minimal risk, though care should be taken to ensure the user has legitimate access to view the spaces they can access.

From the tool's definition The tool 'list_copilot_spaces' explicitly 'Retrieves the list of Copilot Spaces accessible to the user, including their names and owners.' The verb 'retrieves' and the lack of any modification, creation, or deletion of data indicates a read-only operation.

The rule that runs list_copilot_spaces safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GitHub, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_copilot_spaces, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_copilot_spaces": {}
  }
}

Questions about list_copilot_spaces