count

What count does on Build

AI agents call count to retrieve information from Build without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why count is rated Low

This tool performs pattern matching and counting across files, which is a read-only information retrieval operation. It uses ripgrep (a standard search utility) to find matches and report statistics. There is no capability to modify, execute, delete, or affect external systems. The blast radius of misuse is minimal—an attacker could only gather information about code patterns or file contents.

From the tool's definition Tool description states it 'Counts pattern matches per file using ripgrep' and 'Returns per-file match counts and totals' — purely a search/query operation with no modifications or side effects.

The rule that runs count safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Build, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For count, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "count": {}
  }
}

Questions about count