copilot_get_content_exclusions

What copilot_get_content_exclusions does on Sage MCP

AI agents call copilot_get_content_exclusions to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why copilot_get_content_exclusions is rated Low

This tool retrieves configuration data (content exclusion rules) without modifying, deleting, or executing any operations. It has no side effects and poses minimal security risk if misused by an AI agent, as it only exposes organizational policy information that would typically be accessible to authorized users querying system configuration.

From the tool's definition Tool name 'copilot_get_content_exclusions' with description 'Get Copilot content exclusion rules for an organization' indicates a retrieval operation. The verb 'Get' and lack of modification, deletion, or execution semantics confirm this is a read-only query.

The rule that runs copilot_get_content_exclusions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For copilot_get_content_exclusions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "copilot_get_content_exclusions": {}
  }
}

Questions about copilot_get_content_exclusions