BrowseCloudVaultEntity

What BrowseCloudVaultEntity does on Veeam VBR v13 MCP Server

AI agents call BrowseCloudVaultEntity to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why BrowseCloudVaultEntity is rated Low

This tool retrieves and displays information about cloud vault contents. While it is a read operation with no direct side effects, the moderate severity reflects that unauthorized browsing of backup vault contents could expose sensitive data (backup metadata, schedules, stored system configurations). The blast radius is bounded to information disclosure rather than data modification or destruction.

From the tool's definition Tool name 'Browse' and description 'Browse the contents of a Veeam Data Cloud Vault' indicate data retrieval/querying operations without modification. The verb 'browse' is a read-only action.

The rule that runs BrowseCloudVaultEntity safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For BrowseCloudVaultEntity, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "BrowseCloudVaultEntity": {}
  }
}

Questions about BrowseCloudVaultEntity