searchTenantsWithId

What searchTenantsWithId does on Fusionauth

AI agents call searchTenantsWithId to retrieve information from Fusionauth without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why searchTenantsWithId is rated Low

This tool retrieves and queries tenant data based on search criteria and pagination parameters. It has no side effects, does not modify, delete, or execute any operations. The blast radius of misuse is minimal — an attacker could enumerate or learn about tenants in the system, but cannot change, destroy, or interact with external systems. This is a classic Read operation.

From the tool's definition Tool name 'searchTenantsWithId' uses the verb 'search' and description states 'Searches tenants with the specified criteria and pagination' — both indicate a read-only query operation with no data modification.

The rule that runs searchTenantsWithId safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fusionauth, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For searchTenantsWithId, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "searchTenantsWithId": {}
  }
}

Questions about searchTenantsWithId