retrieveTwoFactorStatusWithId

What retrieveTwoFactorStatusWithId does on Fusionauth

AI agents call retrieveTwoFactorStatusWithId to retrieve information from Fusionauth without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why retrieveTwoFactorStatusWithId is rated Low

This tool retrieves two-factor authentication status for a user identified by ID. Retrieval operations that query user data without modifying, executing commands, or triggering destructive actions fall squarely into the Read category. The blast radius is minimal—an AI agent using this would only expose authentication status information about a user, not alter systems or trigger financial transactions.

From the tool's definition Tool name contains 'retrieve' and description states 'Retrieve a user'; both indicate a data retrieval operation with no modification or side effects.

The rule that runs retrieveTwoFactorStatusWithId safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fusionauth, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For retrieveTwoFactorStatusWithId, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "retrieveTwoFactorStatusWithId": {}
  }
}

Questions about retrieveTwoFactorStatusWithId