list_employees

What list_employees does on Huly

AI agents call list_employees to retrieve information from Huly without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_employees is rated Low

This tool queries and returns a list of employee data without any side effects or modifications to the system. It performs a simple read operation, which is the lowest severity classification. The blast radius of misuse is minimal—an agent would only retrieve existing employee information. No data is created, modified, deleted, or used to trigger external operations.

From the tool's definition Tool name 'list_employees' and description 'List employees' indicates a retrieval operation. The description explicitly states it 'Returns employees sorted by modification date' with no mention of modification, deletion, or execution of operations.

The rule that runs list_employees safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Huly, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_employees, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_employees": {}
  }
}

Questions about list_employees