service_status

What service_status does on Mcp Control Plane

AI agents call service_status to retrieve information from Mcp Control Plane without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why service_status is rated Low

This tool queries systemd service states (active/enabled status) and returns this information. It has no side effects, does not execute commands, create, modify, or delete data. It is a pure information retrieval operation, fitting the Read category. Severity is low because knowing service states poses minimal security risk unless combined with other tools for malicious orchestration.

From the tool's definition Tool name 'service_status' and description 'Return systemd active/enabled states for services' indicate a query operation that retrieves system state information without modification.

The rule that runs service_status safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Control Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For service_status, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "service_status": {}
  }
}

Questions about service_status