privilege_list

What privilege_list does on Nasbridge

AI agents call privilege_list to retrieve information from Nasbridge without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why privilege_list is rated Low

This tool only retrieves and lists existing privilege and role configurations. It performs no side effects, creates no data, executes no commands, and makes no changes to system state. It is a straightforward read operation that falls clearly into the 'Read' category with low severity since reading privilege information alone poses minimal risk without accompanying write or execute capabilities.

From the tool's definition Tool name is 'privilege_list' and description states 'List all privileges/roles configured on the system' - a pure query/retrieval operation with no modification, deletion, or execution.

The rule that runs privilege_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nasbridge, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For privilege_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "privilege_list": {}
  }
}

Questions about privilege_list