access_list_events

What access_list_events does on UniFi Access MCP

AI agents call access_list_events to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why access_list_events is rated Low

UniFi Access manages physical access control (doors, credentials, visitors). An event list could contain security-relevant logs including access attempts, authentication failures, or door activity. While retrieving this data has no direct side effects (making it 'Read' not 'Execute'), the potential sensitivity of access control event logs elevates severity to medium rather than low.

From the tool's definition Tool name 'access_list_events' indicates it lists/retrieves events from a UniFi Access system. The 'list' verb is a read operation. Empty description limits certainty but aligns with sibling tools like 'access_get_event' which are query/retrieval operations.

The rule that runs access_list_events safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For access_list_events, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "access_list_events": {}
  }
}

Questions about access_list_events