storage_bucket_list

What storage_bucket_list does on Yaver

AI agents call storage_bucket_list to retrieve information from Yaver without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why storage_bucket_list is rated Low

This tool retrieves information about S3 buckets without side effects. Listing buckets is a read-only operation that does not create, modify, delete, or execute any code. While bucket names may be considered sensitive metadata, the action itself is non-destructive and informational. Severity is low because listing buckets alone does not expose their contents or enable unauthorized access without additional tools.

From the tool's definition Tool name 'storage_bucket_list' and description 'List all S3 buckets' indicate a query/retrieval operation with no modification or deletion of resources.

The rule that runs storage_bucket_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Yaver, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For storage_bucket_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "storage_bucket_list": {}
  }
}

Questions about storage_bucket_list