list_following

What list_following does on Forgejo

AI agents call list_following to retrieve information from Forgejo without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_following is rated Low

This is a pure read operation that queries and returns information about a user's following list. It does not create, modify, delete, or execute any actions. The blast radius of misuse is minimal—an AI agent could enumerate user follow relationships but cannot cause harm, financial loss, or irreversible changes. Low severity is appropriate for read-only social graph queries.

From the tool's definition Tool name is 'list_following' and description states it 'List who a user is following' — this retrieves/queries user follow relationship data with no side effects.

The rule that runs list_following safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Forgejo, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_following, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_following": {}
  }
}

Questions about list_following