inspect

What inspect does on Npm

AI agents call inspect to retrieve information from Npm without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why inspect is rated Low

The inspect tool performs information retrieval on containers or images. It gathers and returns structured data about existing resources (state, image metadata, platform details) without creating, modifying, deleting, or executing operations. This is a classic Read category operation with low severity since it has no side effects and poses minimal risk if misused by an agent.

From the tool's definition Tool name 'inspect' combined with description 'Shows detailed container or image information with structured state, image, and platform data' indicates a read-only query operation that retrieves and displays information without modifying state.

The rule that runs inspect safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Npm, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For inspect, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "inspect": {}
  }
}

Questions about inspect