# download_media

Download media from WhatsApp message (image/video/audio/document). Args: message_id, instance_name, filename (optional, auto-detected). Returns: local file path where saved.

Agent View of the PolicyLayer registry record for `download_media`. HTML page: https://policylayer.com/tools/namastexlabs-automagik-tools/download-media

## Facts

- Tool: `download_media`
- Server: Automagik Tools (`namastexlabs/automagik-tools`) — https://policylayer.com/tools/namastexlabs-automagik-tools.md
- Homepage: https://github.com/namastexlabs/automagik-tools
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "download_media",
    "arguments": {}
  }
}
```

## Why download_media is rated Low

The tool retrieves media files from WhatsApp messages and stores them locally. While it involves file I/O, it is fundamentally a read operation that fetches existing data. It does not create, modify, delete, execute code, or perform financial operations. The severity is low because downloading media has minimal blast radius—the worst case is accessing data the agent should not retrieve, not causing irreversible harm.

From the tool's own definition: "Tool description states it 'Download media from WhatsApp message' and 'Returns: local file path where saved.' This is a retrieval operation that downloads existing media content without modifying, deleting, or executing arbitrary code."

## Use case

AI agents call download_media to retrieve information from Automagik Tools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Automagik Tools:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "download_media": {}
  }
}
```

## Other tools on Automagik Tools (121)

- `delete_agent_conversation` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-agent-conversation.md
- `delete_credential` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-credential.md
- `delete_message` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-message.md
- `delete_schedule` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-schedule.md
- `delete_source` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-source.md
- `delete_task` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-task.md
- `delete_team_collaboration` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-team-collaboration.md
- `delete_workflow` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-workflow.md
- `delete_workflow_execution` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/delete-workflow-execution.md
- `end_session` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/end-session.md
- `genie_clear_memories` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/genie-clear-memories.md
- `remove_contact` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/remove-contact.md
- `remove_tool` — Destructive — https://policylayer.com/tools/namastexlabs-automagik-tools/remove-tool.md
- `continue_agent_conversation` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/continue-agent-conversation.md
- `execute_workflow` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/execute-workflow.md
- `run_workflow` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/run-workflow.md
- `send_sticker` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/send-sticker.md
- `send_whatsapp` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/send-whatsapp.md
- `start_agent_conversation` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/start-agent-conversation.md
- `start_google_auth` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/start-google-auth.md
- `start_team_collaboration` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/start-team-collaboration.md
- `wait_minutes` — Execute — https://policylayer.com/tools/namastexlabs-automagik-tools/wait-minutes.md
- `ask_genie` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/ask-genie.md
- `consult_gemini` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/consult-gemini.md
- `manage_instances` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/manage-instances.md
- `manage_traces` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/manage-traces.md
- `my_function` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/my-function.md
- `my_tool` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/my-tool.md
- `send_audio` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/send-audio.md
- `send_presence` — Other — https://policylayer.com/tools/namastexlabs-automagik-tools/send-presence.md
- …and 91 more: https://policylayer.com/tools/namastexlabs-automagik-tools.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=namastexlabs-automagik-tools · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/namastexlabs-automagik-tools