read_note

What read_note does on Iconnect

AI agents call read_note to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why read_note is rated Low

This tool retrieves and queries existing note data without modifying, deleting, or executing any operations. It is a straightforward read operation that returns content in two formats. The severity is low because unauthorized note reading in a personal Apple ecosystem context has limited blast radius compared to Write, Execute, Destructive, or Financial operations.

From the tool's definition Tool name is 'read_note' and description states it 'Read the full content of a specific note by its ID. Returns HTML body and plaintext.' The verb 'read' and the retrieval-only nature indicate data retrieval with no side effects.

The rule that runs read_note safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For read_note, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "read_note": {}
  }
}

Questions about read_note