query-docs

What query-docs does on Uefn

AI agents call query-docs to retrieve information from Uefn without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why query-docs is rated Low

This tool retrieves and summarizes documentation. It has no side effects on the editor state, game assets, or project data. The 'Execute' in the description refers to executing the query operation itself (a read operation), not executing arbitrary code. The blast radius of misuse is minimal—an AI agent could only retrieve documentation it should not see, which is a low-severity information disclosure risk.

From the tool's definition Tool description states 'Execute a docs query and return a human-readable summary.' The verb 'query' combined with 'return' indicates data retrieval without modification.

The rule that runs query-docs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Uefn, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For query-docs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "query-docs": {}
  }
}

Questions about query-docs