process_info

What process_info does on Mcp Control Plane

AI agents call process_info to retrieve information from Mcp Control Plane without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why process_info is rated Low

The tool retrieves and queries process information (memory usage, CPU, status, etc.) which is a read-only operation. However, severity is elevated to medium rather than low because process information could reveal sensitive details about running services, credentials in environment variables, or internal system state that could be leveraged for lateral movement or privilege escalation in a compromised agent scenario.

From the tool's definition Tool name 'process_info' and description 'Return detailed information for a local process' indicate retrieval of process metadata without modification or execution of code.

The rule that runs process_info safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Control Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For process_info, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "process_info": {}
  }
}

Questions about process_info