proxy_get_intercepted

What proxy_get_intercepted does on Kali Security MCP

AI agents call proxy_get_intercepted to retrieve information from Kali Security MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why proxy_get_intercepted is rated Low

This is a Read operation—it queries and retrieves intercepted network requests without modifying data or executing actions. However, the severity is medium rather than low because the intercepted data (requests, responses, credentials, tokens) can be sensitive and reveal system internals when accessed by an AI agent.

From the tool's definition Tool name 'proxy_get_intercepted' and description '获取已拦截的请求列表' (retrieves list of intercepted requests) indicate data retrieval with no modification or execution. The function retrieves already-captured request data from a proxy/MITM tool.

The rule that runs proxy_get_intercepted safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For proxy_get_intercepted, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "proxy_get_intercepted": {}
  }
}

Questions about proxy_get_intercepted