get_policy_detail

What get_policy_detail does on Nodebench

AI agents call get_policy_detail to retrieve information from Nodebench without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_policy_detail is rated Low

This tool retrieves and displays policy configuration data (allowlist/blocklist details). While it accesses security-sensitive information that could be valuable for reconnaissance if misused by an AI agent, it performs no side effects. Severity is elevated from 'low' to 'medium' because policy details could inform attack strategies, but the read-only nature prevents it from being higher.

From the tool's definition Tool name 'get_policy_detail' and description 'View full details of a sandbox policy including effective allowlist/blocklist after merging defaults' indicates data retrieval without modification.

The rule that runs get_policy_detail safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nodebench, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_policy_detail, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_policy_detail": {}
  }
}

Questions about get_policy_detail