googleTagManager_get_container_snippet

What googleTagManager_get_container_snippet does on ScopeGate

AI agents call googleTagManager_get_container_snippet to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why googleTagManager_get_container_snippet is rated Low

This tool retrieves read-only information (a GTM container's JavaScript snippet). While the snippet itself contains code, the tool does not execute it—it merely fetches and returns static configuration data. No data is created, modified, deleted, or executed as a side effect of calling this tool. This is a standard Read operation with low risk, assuming access controls are properly enforced by the ScopeGate gateway.

From the tool's definition Tool name 'get_container_snippet' and description 'Get the GTM JavaScript snippet code for a container' indicate retrieval of existing configuration data without modification, deletion, or execution.

The rule that runs googleTagManager_get_container_snippet safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ScopeGate, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For googleTagManager_get_container_snippet, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "googleTagManager_get_container_snippet": {}
  }
}

Questions about googleTagManager_get_container_snippet