searchEntityGrantsWithId

What searchEntityGrantsWithId does on Fusionauth

AI agents call searchEntityGrantsWithId to retrieve information from Fusionauth without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why searchEntityGrantsWithId is rated Low

This tool retrieves entity grant records matching search criteria. The verb 'search' and the nature of pagination-based retrieval indicate a read-only operation. No data is created, modified, deleted, or executed. The blast radius of misuse is limited to unauthorized information disclosure of entity grants, which is a low-severity concern compared to write, execute, or destructive operations.

From the tool's definition Tool name contains 'search' and description states it 'Searches Entity Grants with the specified criteria and pagination' — a query operation that retrieves data without modification or side effects.

The rule that runs searchEntityGrantsWithId safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fusionauth, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For searchEntityGrantsWithId, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "searchEntityGrantsWithId": {}
  }
}

Questions about searchEntityGrantsWithId