health_sleep

What health_sleep does on Iconnect

AI agents call health_sleep to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why health_sleep is rated Low

This tool retrieves health metrics (sleep data) without creating, modifying, deleting, or executing any operations. It is a straightforward read operation accessing the user's stored health information. Severity is low because exposure of this tool poses minimal risk; an AI agent misuse would only result in reading personal sleep data, not altering system state or triggering external actions.

From the tool's definition Tool description states 'Get total sleep hours for a given date' — a retrieval operation with no modification or execution capability. The qualifier 'Only counts actual sleep stages, not time in bed' confirms it is a passive query of existing health data.

The rule that runs health_sleep safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For health_sleep, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "health_sleep": {}
  }
}

Questions about health_sleep