get_rating

What get_rating does on Iconnect

AI agents call get_rating to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_rating is rated Low

This is a pure read operation that queries existing track metadata. It returns status information (rating, favorited flag, disliked flag) without modifying anything. The absence of any write/execute/delete language and the explicit 'Get' verb confirm this is a Read operation. The severity is low because exposing track preference metadata poses minimal security risk.

From the tool's definition Tool retrieves metadata about a track: 'Get the rating, favorited, and disliked status for a track.' No arguments suggest modification of track data, only retrieval of existing attributes.

The rule that runs get_rating safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_rating, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_rating": {}
  }
}

Questions about get_rating