snow_get_script_output

What snow_get_script_output does on Serac

AI agents call snow_get_script_output to retrieve information from Serac without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why snow_get_script_output is rated Low

The tool retrieves stored results from a past script execution. It does not execute new code, modify data, delete anything, or commit financial transactions. The retrieval of execution output is a read-only operation. Severity is low because the blast radius of retrieving script output is minimal—an agent could learn information it shouldn't have, but cannot directly harm systems through this tool alone.

From the tool's definition Tool name and description: 'Retrieve output from previously executed script using execution ID' — this is a retrieval operation that queries existing data (script output) with no side effects or modifications.

The rule that runs snow_get_script_output safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Serac, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For snow_get_script_output, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "snow_get_script_output": {}
  }
}

Questions about snow_get_script_output