crow_list_files

What crow_list_files does on Crow

AI agents call crow_list_files to retrieve information from Crow without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why crow_list_files is rated Low

This tool retrieves and displays file metadata/listings from storage with no side effects on the underlying data. Filtering is a read-only query operation. It has minimal blast radius—worst case, an AI agent lists files it shouldn't see, which is an information disclosure risk but not destructive or executable. Classified as Read with low severity.

From the tool's definition Tool name 'crow_list_files' and description 'List stored files with optional filtering' indicate a retrieval operation. The verb 'list' with 'optional filtering' describes querying and displaying data without modification, deletion, or execution.

The rule that runs crow_list_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Crow, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For crow_list_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "crow_list_files": {}
  }
}

Questions about crow_list_files