query_photos

What query_photos does on Iconnect

AI agents call query_photos to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why query_photos is rated Low

The tool retrieves or queries data from the Photos library without modifying, deleting, or executing code. This is a classic Read category action. However, severity is elevated to medium because Photos libraries often contain sensitive personal imagery (family photos, travel records, etc.), and unrestricted queries could expose private or intimate content that users reasonably expect to remain private.

From the tool's definition Tool description states 'Query the Photos library with filters' — this is a retrieval operation with no side effects. The filters mentioned (media type, date range, favorites) are read-only query parameters.

The rule that runs query_photos safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For query_photos, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "query_photos": {}
  }
}

Questions about query_photos