protect_search_detections

What protect_search_detections does on UniFi Access MCP

AI agents call protect_search_detections to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why protect_search_detections is rated Low

Without a description, this is inferred from naming conventions. 'Search' operations are generally Read category as they query existing data without modification. However, the medium severity reflects that detections data could be sensitive security information that an AI agent should not broadly access without proper authorization. The confidence is moderated due to the missing description.

From the tool's definition Tool name contains 'search' which typically indicates data retrieval. The 'detections' context suggests querying security event or detection records from a UniFi Access system.

The rule that runs protect_search_detections safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For protect_search_detections, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "protect_search_detections": {}
  }
}

Questions about protect_search_detections