cursor_list_members

What cursor_list_members does on Sage MCP

AI agents call cursor_list_members to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cursor_list_members is rated Low

This tool only retrieves/queries data about team members with no side effects, modifications, or external operations triggered. It falls squarely into the Read category. Severity is low because exposing team member lists, while potentially sensitive, is a common organizational query with limited blast radius in typical misuse scenarios.

From the tool's definition Tool name is 'cursor_list_members' and description states 'List all members of the Cursor team' — a query operation that retrieves team membership information without modifying or executing anything.

The rule that runs cursor_list_members safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cursor_list_members, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cursor_list_members": {}
  }
}

Questions about cursor_list_members