privacy.detect_pii_exposure

What privacy.detect_pii_exposure does on ContextForge MCP Gateway

AI agents call privacy.detect_pii_exposure to retrieve information from ContextForge MCP Gateway without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why privacy.detect_pii_exposure is rated Low

The tool scans or analyzes text to identify PII patterns but does not create, modify, delete, or execute external operations. It has no side effects on the data itself, only returns detection results. Even with 'configurable sensitivity,' it remains a Read operation. Severity is low because misuse would only expose detection results, not cause data loss or enable direct harmful actions.

From the tool's definition Tool name contains 'detect' and description states it 'Detect[s] personally identifiable information in text' — this is a passive analysis/inspection operation with no modification or deletion of data.

The rule that runs privacy.detect_pii_exposure safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ContextForge MCP Gateway, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For privacy.detect_pii_exposure, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "privacy.detect_pii_exposure": {}
  }
}

Questions about privacy.detect_pii_exposure