codex_list_invites

What codex_list_invites does on Sage MCP

AI agents call codex_list_invites to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why codex_list_invites is rated Low

This tool retrieves and displays existing invitation data from the organization. It has no side effects—it does not create, modify, delete, or execute any actions. The blast radius of misuse is minimal; an unauthorized user could view pending invitations but cannot alter them or take destructive actions. Classified as Read with low severity.

From the tool's definition Tool name and description indicate 'List pending invitations' - a retrieval operation that queries organization data without modifying or deleting anything. The verb 'list' is characteristic of Read operations.

The rule that runs codex_list_invites safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For codex_list_invites, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "codex_list_invites": {}
  }
}

Questions about codex_list_invites