cbs-get-metadata

What cbs-get-metadata does on Meta Data Mcp

AI agents call cbs-get-metadata to retrieve information from Meta Data Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cbs-get-metadata is rated Low

This tool retrieves metadata (column descriptions) for a CBS table, which is a read-only operation. It queries and returns information without creating, modifying, deleting, or executing any operations. The blast radius of misuse is minimal—an attacker could only gain knowledge of table structure, not access sensitive data, modify records, or trigger external operations. This is a classic Read category tool.

From the tool's definition Tool name 'cbs-get-metadata' and description 'Fetch metadata (column descriptions) for a specific CBS table ID' indicate retrieval of descriptive information without modification or execution of code.

The rule that runs cbs-get-metadata safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Meta Data Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cbs-get-metadata, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cbs-get-metadata": {}
  }
}

Questions about cbs-get-metadata