describe

What describe does on Git

AI agents call describe to retrieve information from Git without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why describe is rated Low

This tool only retrieves information about Kubernetes resources and presents it to the user. There are no side effects, no data modification, no code execution, and no destructive actions. It is a standard read operation commonly found in Kubernetes tooling (kubectl describe). The blast radius is minimal as misuse would only expose information, not alter infrastructure.

From the tool's definition Tool name is 'describe' and description states it 'Describes a Kubernetes resource with detailed information.' The describe action is a read-only operation that retrieves and displays resource metadata and status without modifying state.

The rule that runs describe safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Git, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For describe, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "describe": {}
  }
}

Questions about describe