get_telemetry

What get_telemetry does on Nyxstrike

AI agents call get_telemetry to retrieve information from Nyxstrike without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_telemetry is rated Low

The tool performs a data retrieval operation ('Get') on system telemetry, which is a read-only action. However, severity is elevated to 'medium' rather than 'low' because in the context of a penetration testing platform (Nyxstrike), telemetry data could expose sensitive system information such as configuration details, performance metrics, or operational state that an attacker could leverage for further exploitation.

From the tool's definition Tool name is 'get_telemetry' and description states 'Get system telemetry from the API server' — this retrieves telemetry data with no modification or destructive capability.

The rule that runs get_telemetry safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nyxstrike, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_telemetry, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_telemetry": {}
  }
}

Questions about get_telemetry