get_server_group

What get_server_group does on API-Central

AI agents call get_server_group to retrieve information from API-Central without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_server_group is rated Low

This tool queries and retrieves configuration data for an authentication server group. It is a read-only operation that does not create, modify, delete, or execute any actions. The 'get' verb and retrieval semantics clearly indicate a Read category classification with low severity, as unauthorized access would only expose existing configuration data without enabling destructive or operational changes.

From the tool's definition Tool name 'get_server_group' and description 'Get a single auth server group by name' indicate a retrieval operation with no modification or side effects.

The rule that runs get_server_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and API-Central, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_server_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_server_group": {}
  }
}

Questions about get_server_group