get_footnotes

What get_footnotes does on Docx

AI agents call get_footnotes to retrieve information from Docx without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_footnotes is rated Low

The tool performs a read-only query of footnote metadata and content from a Word document. There are no side effects, no code execution, no data modification, and no destructive operations. The blast radius of misuse is minimal—an AI agent could only extract information that already exists in the document, with no capability to alter document state or trigger external actions.

From the tool's definition Tool name and description: 'List all footnotes with their ID and text content.' This is a retrieval operation that queries existing footnotes without modifying, executing, or deleting any document data.

The rule that runs get_footnotes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_footnotes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_footnotes": {}
  }
}

Questions about get_footnotes