searchUsersByQueryWithId

What searchUsersByQueryWithId does on Fusionauth

AI agents call searchUsersByQueryWithId to retrieve information from Fusionauth without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why searchUsersByQueryWithId is rated Low

This tool performs a search query to retrieve user data based on provided criteria. It has no capability to modify, delete, or execute operations—it only fetches and returns existing user information. This is a standard Read operation with minimal security risk, assuming the search is appropriately scoped by the caller's permissions.

From the tool's definition Tool description states it 'Retrieves the users for the given search criteria and pagination.' The verb 'Retrieves' and the query-based nature indicate a read-only operation with no data modification or side effects.

The rule that runs searchUsersByQueryWithId safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fusionauth, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For searchUsersByQueryWithId, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "searchUsersByQueryWithId": {}
  }
}

Questions about searchUsersByQueryWithId