cloudsync_credentials_list

What cloudsync_credentials_list does on Nasbridge

AI agents call cloudsync_credentials_list to retrieve information from Nasbridge without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cloudsync_credentials_list is rated Low

This tool queries and retrieves stored cloud synchronization credentials without altering, deleting, or executing any operations. It is a straightforward data retrieval action. Severity is low because listing credentials is read-only, though the credentials themselves are sensitive data; an agent misusing this would still only gather information rather than access external cloud services or modify system state.

From the tool's definition Tool name contains 'list' and description states 'List all cloud sync credentials' — a retrieval-only operation with no modifications or side effects.

The rule that runs cloudsync_credentials_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nasbridge, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cloudsync_credentials_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cloudsync_credentials_list": {}
  }
}

Questions about cloudsync_credentials_list