get_me

What get_me does on Spotify

AI agents call get_me to retrieve information from Spotify without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_me is rated Low

This tool retrieves the authenticated user's information from Spotify. It is a read-only operation with no side effects, no data modification, no code execution, and no destructive capability. The blast radius if misused is minimal—an AI agent can only access the current user's profile data, which is already available through authentication context. Classified as Read with low severity.

From the tool's definition Tool name 'get_me' and description 'Get the current user' indicate a retrieval operation that queries user profile information without modifying or executing any actions.

The rule that runs get_me safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Spotify, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_me, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_me": {}
  }
}

Questions about get_me