stateset_get_customer

What stateset_get_customer does on Stateset

AI agents call stateset_get_customer to retrieve information from Stateset without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why stateset_get_customer is rated Low

This tool retrieves customer information by ID. It performs a read-only query operation that retrieves data without modifying, deleting, or executing any operations. The verb 'Get' and the context of querying by ID confirm this is a Read operation. Severity is low because the operation only retrieves existing data and does not expose sensitive financial transactions or destructive capabilities.

From the tool's definition Tool name 'stateset_get_customer' and description 'Get a specific customer by ID' indicate a retrieval operation with no side effects.

The rule that runs stateset_get_customer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Stateset, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For stateset_get_customer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "stateset_get_customer": {}
  }
}

Questions about stateset_get_customer