get_custom_field_values

What get_custom_field_values does on Huly

AI agents call get_custom_field_values to retrieve information from Huly without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_custom_field_values is rated Low

This tool queries and retrieves custom field values without side effects. It performs a straightforward read operation on document metadata. There is no creation, modification, deletion, or execution of code. The low severity reflects that misuse would only expose data already accessible within the Huly system, with no destructive or financial impact.

From the tool's definition Tool description explicitly states "Read custom field values from a document." The verb "Read" and the retrieval-only nature (no modification, deletion, or execution) clearly indicate this is a data retrieval operation.

The rule that runs get_custom_field_values safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Huly, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_custom_field_values, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_custom_field_values": {}
  }
}

Questions about get_custom_field_values