gitlab_search_users

What gitlab_search_users does on Sage MCP

AI agents call gitlab_search_users to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gitlab_search_users is rated Low

This tool retrieves user information from GitLab but does not create, modify, delete, or execute any operations. It performs a simple search query analogous to a directory lookup. The blast radius is minimal—an AI agent could gather information about GitLab users, but this information is either public or already authorized for the token in use. No side effects or irreversible actions are possible.

From the tool's definition The tool description explicitly states it "Search[es] GitLab users by email or username," which is a data retrieval operation with no modification or deletion.

Risk signalsAdmin/system-level operation

The rule that runs gitlab_search_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gitlab_search_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gitlab_search_users": {}
  }
}

Questions about gitlab_search_users