users_identity

What users_identity does on Slack

AI agents call users_identity to retrieve information from Slack without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why users_identity is rated Low

This tool retrieves user identity data without creating, modifying, deleting, or executing any operations. It falls clearly into the Read category as it only queries and returns information. The severity is low because user identity information, while sensitive, is not typically mission-critical and disclosure does not directly compromise system integrity or financial assets in most contexts.

From the tool's definition Tool name 'users_identity' and description 'Get a user's identity' indicate data retrieval with no modification or side effects. This is a straightforward query operation that fetches user identity information.

The rule that runs users_identity safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For users_identity, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "users_identity": {}
  }
}

Questions about users_identity