github_get_workflow_run

What github_get_workflow_run does on Sage MCP

AI agents call github_get_workflow_run to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why github_get_workflow_run is rated Low

This tool retrieves information about a GitHub Actions workflow run. The verb 'Get' and the read-only nature of querying workflow run details classify it as a Read operation. Severity is low because retrieving workflow metadata poses minimal risk—it exposes information that is typically visible in GitHub's UI to authorized users, with no side effects or ability to modify, delete, or trigger actions.

From the tool's definition Tool name 'github_get_workflow_run' and description 'Get details of a specific workflow run' indicate retrieval of workflow execution metadata without modification.

The rule that runs github_get_workflow_run safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_get_workflow_run, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_get_workflow_run": {}
  }
}

Questions about github_get_workflow_run