device_crawl_api

What device_crawl_api does on Uefn

AI agents call device_crawl_api to retrieve information from Uefn without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why device_crawl_api is rated Low

This tool queries metadata about actor APIs to enumerate available methods and properties. It is informational only, returning data about the actor's interface without side effects. This fits the Read category (retrieves or queries data; no side effects). The low severity reflects minimal blast radius — misuse would only expose metadata, not corrupt data or trigger unwanted actions.

From the tool's definition Tool performs 'Discover available methods and properties on selected actors via API crawl' — a pure discovery/inspection operation that introspects existing actor definitions without modifying state, creating resources, or executing arbitrary code.

The rule that runs device_crawl_api safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Uefn, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For device_crawl_api, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "device_crawl_api": {}
  }
}

Questions about device_crawl_api