protect_list_known_faces

What protect_list_known_faces does on UniFi Access MCP

AI agents call protect_list_known_faces to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why protect_list_known_faces is rated Low

The tool appears to query or enumerate known faces in the UniFi Access system. 'List' operations are read-only retrievals with no side effects. While the description is empty, the naming convention and context of a physical access system suggest this retrieves a roster of recognized identities. No modification, deletion, or execution is implied.

From the tool's definition Tool name 'protect_list_known_faces' uses the verb 'list', which indicates data retrieval. Description is empty, limiting certainty. Sibling tools (access_get_*) follow a read pattern, supporting this classification.

The rule that runs protect_list_known_faces safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For protect_list_known_faces, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "protect_list_known_faces": {}
  }
}

Questions about protect_list_known_faces