scan_notes

What scan_notes does on AirMCP

AI agents call scan_notes to retrieve information from AirMCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why scan_notes is rated Low

scan_notes retrieves and displays note metadata and previews from the user's Notes app. It has no side effects, does not create, modify, or delete data, and does not execute arbitrary code or perform financial transactions. This is a straightforward read operation with minimal risk if misused by an AI agent (worst case: reading sensitive personal notes, which is a privacy concern but not operationally damaging).

From the tool's definition Tool description states it 'scan notes returning metadata and a text preview' and 'get an overview' — these are retrieval operations with no modification. The mention of 'pagination via offset' and optional filtering further confirm this is a query operation.

The rule that runs scan_notes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AirMCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For scan_notes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "scan_notes": {}
  }
}

Questions about scan_notes