List downloaded files with optional filtering by tab, status, extension, MIME type, and size range. Each download includes contentUrl for direct file retrieval.
AI agents call list_downloads to retrieve information from Camofox without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
This is a read operation that queries download history and metadata. However, the context of an anti-detection browser automation tool combined with access to downloaded file URLs (contentUrl) and the ability to filter by extension/MIME type elevates severity to medium: an agent could use this to enumerate and potentially retrieve sensitive files downloaded during anti-detection sessions, or coordinate with other…
From the tool's definition Tool name 'list_downloads' and description state it 'List downloaded files' with filtering options. No modification, deletion, or execution occurs—it retrieves and queries download metadata including contentUrl.
Documented attack patterns abuse exactly the kind of access list_downloads gives an agent:
PolicyLayer is an MCP gateway — it sits between your AI agents and Camofox, and nothing reaches the server without passing your rules. This is the rule we recommend for list_downloads:
{
"version": "1",
"default": "deny",
"tools": {
"list_downloads": {}
}
}list_downloads is read-only, so it stays allowed — but everything else on the server is denied unless you say otherwise.
Free to start. No card required.
List downloaded files with optional filtering by tab, status, extension, MIME type, and size range. Each download includes contentUrl for direct file retrieval. It is categorised as a Read tool in the Camofox MCP Server, which means it retrieves data without modifying state.
Register the Camofox MCP server in PolicyLayer and add a rule for list_downloads: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Camofox. Nothing to install.
list_downloads is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the list_downloads rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for list_downloads. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
list_downloads is provided by the Camofox MCP server (redf0x1/camofox-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Deterministic rules across all 47 Camofox tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.
Free to start. No card required.
47 Camofox tools catalogued and risk-classified — across an index of 42,500+ MCP servers.