federation_audit

What federation_audit does on Ruflo

AI agents call federation_audit to retrieve information from Ruflo without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why federation_audit is rated Low

This tool retrieves and queries existing audit log data. It does not create, modify, delete, or execute any operations. The filtering capability is a retrieval parameter, not a destructive or mutative action. Therefore, it falls squarely into the Read category with low severity, as misuse would only expose information already logged in the system.

From the tool's definition Tool name is 'federation_audit' and description states 'Query federation audit logs with optional compliance mode filtering'. The verb 'Query' and the action of retrieving audit logs are read-only operations with no side effects.

The rule that runs federation_audit safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ruflo, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For federation_audit, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "federation_audit": {}
  }
}

Questions about federation_audit