h1_list_programs

What h1_list_programs does on Intellirecon Console

AI agents call h1_list_programs to retrieve information from Intellirecon Console without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why h1_list_programs is rated Low

This tool retrieves and displays information about HackerOne programs available to the user (both private invited programs and public ones). It performs a query with no capability to create, modify, delete, or execute operations. The blast radius of misuse is minimal—an agent can only view accessible program metadata, which does not compromise security, violate access controls, or enable further attacks by itself.

From the tool's definition Tool name 'h1_list_programs' and description 'List HackerOne programs visible to this account' indicate a retrieval operation with no side effects. The verb 'List' and action of querying/displaying existing programs confirms read-only behavior.

The rule that runs h1_list_programs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Intellirecon Console, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For h1_list_programs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "h1_list_programs": {}
  }
}

Questions about h1_list_programs