get_authz_policy

What get_authz_policy does on API-Central

AI agents call get_authz_policy to retrieve information from API-Central without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_authz_policy is rated Low

This tool retrieves an existing authorization policy configuration by its identifier. It performs a read-only query operation with no side effects, state changes, or code execution. The blast radius of misuse is minimal—an adversary would gain visibility into policy settings but cannot alter network configuration, execute commands, or cause data loss.

From the tool's definition Tool name 'get_authz' and description 'Get a single CNAC authz policy by ID' indicate a retrieval operation. The verb 'Get' and singular noun phrase establish this as a data query with no modification or execution.

The rule that runs get_authz_policy safely

PolicyLayer is an MCP gateway: it sits between your AI agents and API-Central, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_authz_policy, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_authz_policy": {}
  }
}

Questions about get_authz_policy