h1_get_scope_exclusions

What h1_get_scope_exclusions does on Intellirecon Console

AI agents call h1_get_scope_exclusions to retrieve information from Intellirecon Console without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why h1_get_scope_exclusions is rated Low

This tool retrieves program scope exclusion information from HackerOne (indicated by 'h1_' prefix), which is a query operation with no side effects. However, the severity is medium rather than low because the data retrieved could inform attack planning in the context of this security recon console—scope exclusions are sensitive details that, if misused by an agent, could guide reconnaissance toward out-of-scope…

From the tool's definition Tool name 'h1_get_scope_exclusions' and description 'Get a program' indicate a retrieval operation. The naming convention suggests querying HackerOne program scope exclusions, which is a read-only data retrieval action.

The rule that runs h1_get_scope_exclusions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Intellirecon Console, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For h1_get_scope_exclusions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "h1_get_scope_exclusions": {}
  }
}

Questions about h1_get_scope_exclusions