unifi_get_usergroup_details

What unifi_get_usergroup_details does on UniFi Access MCP

AI agents call unifi_get_usergroup_details to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why unifi_get_usergroup_details is rated Low

The tool retrieves detailed information about a user group, which is a standard read/query operation. It does not create, modify, delete, or execute any actions—it only fetches and returns data. The low severity reflects that unauthorized access to user group metadata poses minimal direct risk compared to tools that could modify access policies, delete credentials, or control physical doors.

From the tool's definition Tool name 'unifi_get_usergroup_details' and description 'Get detailed information about a specific user group by its ID' indicate a read-only query operation that retrieves existing data without modification or side effects.

The rule that runs unifi_get_usergroup_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_get_usergroup_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_get_usergroup_details": {}
  }
}

Questions about unifi_get_usergroup_details