search_files

What search_files does on AirMCP

AI agents call search_files to retrieve information from AirMCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_files is rated Low

This tool retrieves data via file search without side effects. No creation, modification, deletion, or code execution occurs. While the search could theoretically reveal sensitive file metadata or contents an AI agent should not access, the risk is mitigated by file system access controls. Categorized as Read with low severity due to local file system scope and read-only nature.

From the tool's definition Tool performs file search using Spotlight (mdfind) to query file names and content. Description explicitly states 'Search files' with no mention of modification, deletion, or execution. The mechanism (mdfind) is a read-only indexing/search utility.

The rule that runs search_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AirMCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_files": {}
  }
}

Questions about search_files