access_get_credential

What access_get_credential does on UniFi Access MCP

AI agents call access_get_credential to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why access_get_credential is rated Low

This is a Read operation because it retrieves credential information without side effects. Severity is medium rather than low because credentials are sensitive data—if an agent gains access to detailed credential information in a security system (UniFi Access manages door access), it could be misused for unauthorized access attempts, even though the tool itself does not perform any write, destructive, or execute…

From the tool's definition Tool name 'access_get_credential' and description 'Get detailed credential information by ID' indicate data retrieval with no modification. The verb 'Get' is a classic read operation.

The rule that runs access_get_credential safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For access_get_credential, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "access_get_credential": {}
  }
}

Questions about access_get_credential