do_list_droplets

What do_list_droplets does on UnClick

AI agents call do_list_droplets to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why do_list_droplets is rated Low

This tool retrieves and lists DigitalOcean droplets with status information—a read-only operation with no side effects on the resources themselves. However, severity is elevated to 'medium' because the data retrieved (server/infrastructure inventory, power status) could enable reconnaissance for targeted attacks if an AI agent were compromised or operating under malicious intent, revealing infrastructure topology…

From the tool's definition Tool name 'do_list_droplets' and description 'List DigitalOcean droplets (signals when any are powered off)' indicate a query operation that retrieves and displays information about cloud infrastructure resources without modification.

Risk signalsHandles credentials or secrets (access_token)

The rule that runs do_list_droplets safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For do_list_droplets, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "do_list_droplets": {}
  }
}

Questions about do_list_droplets