env

What env does on Lint

AI agents call env to retrieve information from Lint without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why env is rated Low

The tool performs a retrieval-only operation on Go environment variables. It does not modify any state, execute code, delete data, or move money. It simply reads and returns structured information about the environment, which is characteristic of a Read category tool. The blast radius is minimal since environment variable disclosure alone cannot cause direct harm in most contexts.

From the tool's definition Tool description states 'Returns Go environment variables as structured JSON. Optionally request specific variables.' This is a pure query operation that retrieves and returns environment data with no modification, deletion, or execution of commands.

The rule that runs env safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Lint, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For env, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "env": {}
  }
}

Questions about env