list_workflow_runs

What list_workflow_runs does on Ncp

AI agents call list_workflow_runs to retrieve information from Ncp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_workflow_runs is rated Low

This tool retrieves and lists workflow run data from GitHub Actions. It performs a query operation with no side effects, no data modification, and no irreversible actions. The blast radius of misuse is minimal—an agent could retrieve workflow information but cannot execute workflows, delete them, or modify CI/CD pipelines. This is a straightforward Read operation.

From the tool's definition Tool name 'list_workflow_runs' and description 'List GitHub Actions workflow runs' indicate a retrieval operation that queries workflow execution history without modifying data.

The rule that runs list_workflow_runs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_workflow_runs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_workflow_runs": {}
  }
}

Questions about list_workflow_runs