inspect

What inspect does on Cargo

AI agents call inspect to retrieve information from Cargo without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why inspect is rated Low

This tool performs introspection on container/image state and metadata. It has no side effects, does not execute code, does not modify data, and does not perform financial or destructive operations. It is purely informational, consistent with typical 'inspect' commands in container tooling (e.g., Docker inspect) that retrieve structural data about resources.

From the tool's definition Tool name 'inspect' and description stating it 'Shows detailed container or image information' indicates a read-only query operation that retrieves and displays metadata about containers or images without modifying or executing anything.

The rule that runs inspect safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Cargo, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For inspect, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "inspect": {}
  }
}

Questions about inspect