logs

What logs does on Git

AI agents call logs to retrieve information from Git without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why logs is rated Low

This tool retrieves pre-existing container logs in a structured format. It performs no mutations, deletions, or external operations—purely data retrieval. The low severity reflects that log access is informational only, though confidence is slightly reduced because the description does not explicitly state read-only semantics, and container logs could theoretically contain sensitive information depending on…

From the tool's definition Tool name 'logs' and description 'Retrieves container logs as structured line arrays' indicate a read-only operation that queries and returns existing log data without modification or side effects.

The rule that runs logs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Git, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For logs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "logs": {}
  }
}

Questions about logs