get_user

What get_user does on Integrations MCP

AI agents call get_user to retrieve information from Integrations MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_user is rated Low

This tool retrieves public profile information from GitHub, which is a read-only operation that queries existing data without creating, modifying, deleting, or executing any actions. The data retrieved is public by nature, limiting the sensitivity of the information exposed. The blast radius of misuse is minimal—an agent could enumerate public user profiles but cannot alter data or trigger external operations.

From the tool's definition Tool name 'get_user' and description 'Get public profile information for a GitHub user' indicate retrieval of data with no modification or side effects.

The rule that runs get_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Integrations MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_user": {}
  }
}

Questions about get_user