users_get_presence

What users_get_presence does on Slack

AI agents call users_get_presence to retrieve information from Slack without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why users_get_presence is rated Low

This tool retrieves presence status information about users (online, away, etc.). It is a read-only query that does not modify data, execute commands, or trigger external operations. The blast radius of misuse is minimal—an attacker could learn when users are active, but cannot access sensitive content, modify data, delete information, or move money. Low severity reflects the informational nature of the data exposed.

From the tool's definition Tool name 'users_get_presence' and description 'Get user presence information' indicate a retrieval operation with no modification or side effects.

The rule that runs users_get_presence safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For users_get_presence, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "users_get_presence": {}
  }
}

Questions about users_get_presence