maker_list_learners

What maker_list_learners does on Crow

AI agents call maker_list_learners to retrieve information from Crow without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why maker_list_learners is rated Low

The tool queries and retrieves learner profile information with no side effects. Even though it is admin-restricted and operates on project management data, the action itself is a simple enumeration/retrieval operation. The blast radius of misuse is low—an attacker gains visibility into learner profiles but cannot modify, delete, or execute actions. This is clearly a Read category tool.

From the tool's definition Tool name 'maker_list_learners' uses 'list' verb, and description states 'List all learner profiles.' This is a read-only operation that retrieves data without modification. The admin-only restriction further limits exposure.

Risk signalsAdmin/system-level operation

The rule that runs maker_list_learners safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Crow, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For maker_list_learners, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "maker_list_learners": {}
  }
}

Questions about maker_list_learners