get_users

What get_users does on Ncp

AI agents call get_users to retrieve information from Ncp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_users is rated Low

This tool retrieves user data from Auth0 without side effects. It is a read-only operation that lists existing users. While user data may be sensitive, the tool itself performs no destructive, write, execute, or financial operations. The severity is low because listing users is a common and non-disruptive query, though confidence is high given the clear read-only nature.

From the tool's definition Tool name is 'get_users' and description states 'List Auth0 users'. This performs a straightforward query/retrieval operation with no modification, deletion, or execution of external commands.

The rule that runs get_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_users": {}
  }
}

Questions about get_users