query_database

What query_database does on Ncp

AI agents call query_database to retrieve information from Ncp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why query_database is rated Low

This tool retrieves or queries data from a Notion database without any side effects such as creation, modification, or deletion. It falls clearly into the Read category. The severity is low because querying data has minimal blast radius—the worst outcome is information disclosure, not data loss or financial impact.

From the tool's definition Tool name 'query_database' combined with description 'Query a Notion database' indicates data retrieval without modification. The verb 'query' is explicitly associated with read-only operations.

The rule that runs query_database safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ncp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For query_database, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "query_database": {}
  }
}

Questions about query_database