volume-ls

What volume-ls does on Test

AI agents call volume-ls to retrieve information from Test without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why volume-ls is rated Low

This tool performs a non-destructive query of Docker volumes and returns structured metadata (driver, mountpoint, scope). It has no capability to create, modify, delete, or execute operations. The blast radius is minimal—an AI agent misusing this tool could at worst discover volume names and locations, but cannot cause irreversible harm or trigger external side effects beyond information disclosure.

From the tool's definition Tool name 'volume-ls' and description 'Lists Docker volumes with structured driver, mountpoint, and scope information' indicate a read-only query operation that retrieves and returns information about existing Docker volumes.

The rule that runs volume-ls safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Test, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For volume-ls, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "volume-ls": {}
  }
}

Questions about volume-ls