get_two_factor_secret

What get_two_factor_secret does on Linode MCP Server

AI agents call get_two_factor_secret to retrieve information from Linode MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_two_factor_secret is rated Low

This tool retrieves sensitive authentication data (2FA secret and QR code) which are used for account security. While classified as Read (no data modification), the severity is high because exposure of 2FA secrets could compromise account security and enable unauthorized access. The confidence is 0.9 because the description clearly indicates a retrieval operation on security-critical data.

From the tool's definition Tool name 'get_two_factor_secret' and description 'Get a two-factor authentication secret and QR code' indicates retrieval of authentication credentials without modification or deletion.

The rule that runs get_two_factor_secret safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Linode MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_two_factor_secret, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_two_factor_secret": {}
  }
}

Questions about get_two_factor_secret