get_release_by_tag

What get_release_by_tag does on Forgejo

AI agents call get_release_by_tag to retrieve information from Forgejo without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_release_by_tag is rated Low

This tool retrieves metadata about a GitHub release identified by a tag. It performs a read-only query operation with no capability to modify, delete, or execute code. The blast radius of misuse is minimal—an agent could only access release information that would typically be public or already accessible to the authenticated user.

From the tool's definition Tool name 'get_release_by_tag' and description 'Get a release by tag name' indicate a retrieval operation with no side effects. This queries existing release data without modification.

The rule that runs get_release_by_tag safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Forgejo, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_release_by_tag, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_release_by_tag": {}
  }
}

Questions about get_release_by_tag