list_admin_accounts

What list_admin_accounts does on Ikuai

AI agents call list_admin_accounts to retrieve information from Ikuai without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_admin_accounts is rated Low

This is a Read operation as it queries and retrieves administrator account information without side effects. However, severity is elevated to 'high' because the data retrieved—administrative credentials—has substantial blast radius if exposed to an attacker: knowledge of admin accounts enables targeted compromise of the router's control plane.

From the tool's definition Tool name 'list_admin_accounts' and description '列出管理员账号' (list administrator accounts) indicate data retrieval of sensitive administrative credentials/accounts without modification.

The rule that runs list_admin_accounts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ikuai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_admin_accounts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_admin_accounts": {}
  }
}

Questions about list_admin_accounts