immich_get_album

What immich_get_album does on Crow

AI agents call immich_get_album to retrieve information from Crow without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why immich_get_album is rated Low

The tool fetches album metadata and associated assets from an Immich media library. This is a read-only operation with no side effects, no code execution, and no data modification. The blast radius of misuse is minimal—an AI agent could retrieve album information it shouldn't have access to, but cannot alter, delete, or damage data. Classified as Read with low severity.

From the tool's definition Tool name and description indicate retrieval operation: 'Get album details including asset list' performs a query that retrieves existing data without modification or deletion.

The rule that runs immich_get_album safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Crow, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For immich_get_album, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "immich_get_album": {}
  }
}

Questions about immich_get_album