list_extensions

What list_extensions does on Mcpg

AI agents call list_extensions to retrieve information from Mcpg without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_extensions is rated Low

This tool retrieves information about available PostgreSQL extensions without creating, modifying, or deleting data. The 'list' operation is a standard Read action with no side effects. The empty description reduces confidence slightly, but the clear naming convention supports Read classification. Low severity: querying extension metadata poses minimal risk even if invoked by a misaligned agent.

From the tool's definition Tool name 'list_extensions' indicates a query/retrieval operation typical of Read category actions (list, get, fetch). The verb 'list' explicitly suggests retrieving data without modification.

The rule that runs list_extensions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcpg, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_extensions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_extensions": {}
  }
}

Questions about list_extensions