gitlab_list_project_members

What gitlab_list_project_members does on Sage MCP

AI agents call gitlab_list_project_members to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gitlab_list_project_members is rated Low

This tool retrieves and returns a list of project members—a read-only operation with no side effects. It falls squarely into the Read category. The severity is low because exposure of project membership information carries limited blast radius; it does not enable modification, deletion, or execution of operations. The confidence is high given the clear semantic meaning of the operation.

From the tool's definition Tool name and description indicate listing project members: 'gitlab_list_project_members' and 'List members of a project'. This is a query operation that retrieves information without modifying or deleting data.

The rule that runs gitlab_list_project_members safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gitlab_list_project_members, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gitlab_list_project_members": {}
  }
}

Questions about gitlab_list_project_members