hero_all

What hero_all does on UnClick

AI agents call hero_all to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why hero_all is rated Low

This tool performs a simple query/list operation that retrieves and returns superhero and villain data. There is no capability to modify, delete, execute code, or perform financial transactions. The operation is read-only and returns a paginated result set (first 50 records). Misuse poses minimal risk as an AI agent cannot cause harm by retrieving publicly available fictional character data.

From the tool's definition Tool name 'hero_all' and description 'List all superheroes and villains (returns first 50 with IDs)' indicates a data retrieval operation with no side effects.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs hero_all safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For hero_all, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "hero_all": {}
  }
}

Questions about hero_all