show_binary_logs

What show_binary_logs does on Mysql

AI agents call show_binary_logs to retrieve information from Mysql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why show_binary_logs is rated Low

This tool retrieves information about binary log files, which is a non-destructive query operation. It falls clearly into the Read category as it queries database metadata. While binary logs contain sensitive operational data, the tool itself only displays existing logs and does not execute commands, modify data, or trigger external operations.

From the tool's definition Tool name 'show_binary_logs' indicates a query/retrieval operation. Description states 'Show binary log files' — a read-only action that retrieves metadata about binary logs without modification or execution.

The rule that runs show_binary_logs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mysql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For show_binary_logs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "show_binary_logs": {}
  }
}

Questions about show_binary_logs