credentials_list

What credentials_list does on Aibtc

AI agents call credentials_list to retrieve information from Aibtc without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why credentials_list is rated Low

This is a Read operation (list/query with no data modification), but severity is elevated to medium rather than low because: (1) enumerating stored credentials reveals the attack surface and what services are integrated, (2) this metadata could enable targeted social engineering or lateral movement, and (3) combined with other tools, an attacker could use this information to prioritize which credentials to target.

From the tool's definition Tool description states it "List all stored credentials" and "Shows service names, key names, and last-updated timestamps" — a retrieval operation that queries stored data without side effects. Explicitly clarifies it "Does NOT reveal credential values."

The rule that runs credentials_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aibtc, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For credentials_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "credentials_list": {}
  }
}

Questions about credentials_list