volume-ls

What volume-ls does on Docker

AI agents call volume-ls to retrieve information from Docker without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why volume-ls is rated Low

This tool performs a read-only listing operation similar to 'docker volume ls'. It retrieves and returns information about Docker volumes with no side effects, no code execution, and no data modification or deletion. This is a standard informational query operation with minimal blast radius if misused—an agent could at worst enumerate volumes, which is non-destructive reconnaissance.

From the tool's definition Tool name 'volume-ls' and description 'Lists Docker volumes with structured driver, mountpoint, and scope information' indicate a query operation that retrieves data about existing Docker volumes without modifying or executing any operations.

The rule that runs volume-ls safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docker, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For volume-ls, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "volume-ls": {}
  }
}

Questions about volume-ls