list_containers

What list_containers does on Ncp

AI agents call list_containers to retrieve information from Ncp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_containers is rated Low

This tool performs a read-only query of Docker container metadata. It retrieves information about running or existing containers without side effects, mutations, or code execution. The blast radius of misuse is minimal—an AI agent could only enumerate containers, which may expose some infrastructure details but cannot modify state or trigger actions.

From the tool's definition Tool name 'list_containers' and description 'List Docker containers' indicate a retrieval operation that queries container state without modifying or executing anything.

The rule that runs list_containers safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_containers, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_containers": {}
  }
}

Questions about list_containers