user_permissions_get

What user_permissions_get does on Samarth Gtm Mcp

AI agents call user_permissions_get to retrieve information from Samarth Gtm Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why user_permissions_get is rated Low

This tool queries and retrieves an existing user permission record from GTM. It does not create, modify, delete, or execute any actions. The blast radius of misuse is minimal — an AI agent could view permission metadata but cannot alter access controls or perform unauthorized operations. Aligns with the Read category definition: 'retrieves or queries data; no side effects'.

From the tool's definition Tool name contains 'get' and description states 'Get a specific user permission record' — retrieves data without modification or side effects. Server is described as 'read-only by default' with 'gated writes', confirming this is a read operation.

The rule that runs user_permissions_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Samarth Gtm Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For user_permissions_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "user_permissions_get": {}
  }
}

Questions about user_permissions_get