get-user-groups

What get-user-groups does on Mcp Dev

AI agents call get-user-groups to retrieve information from Mcp Dev without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get-user-groups is rated Low

This tool retrieves user group information from Umbraco CMS without creating, modifying, or deleting data. It is a query operation that returns existing data, fitting the Read category. Severity is low because user group enumeration, while potentially informative to an attacker, does not directly compromise systems or data and is typically available to authenticated administrative users in CMS environments.

From the tool's definition Tool name 'get-user-groups' and description 'Gets all user groups' indicate a retrieval operation with no modification or side effects.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs get-user-groups safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Dev, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get-user-groups, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get-user-groups": {}
  }
}

Questions about get-user-groups