reference.audit_derivations

What reference.audit_derivations does on Visionmcp

AI agents call reference.audit_derivations to retrieve information from Visionmcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why reference.audit_derivations is rated Low

This tool retrieves and verifies lineage information and governance attributes without modifying or deleting data. It is a read-only audit function that queries governance and reference relationships. While audit tools can sometimes reveal sensitive information (moderate information disclosure risk), they do not execute code, trigger external operations, modify data, delete data, or move funds.

From the tool's definition The tool 'audit_derivations' performs auditing of 'immutable derived-reference lineage' and 'inherited source governance.' The terms 'audit' and 'inherited source governance' indicate inspection, verification, and querying of existing metadata and governance…

The rule that runs reference.audit_derivations safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Visionmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For reference.audit_derivations, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "reference.audit_derivations": {}
  }
}

Questions about reference.audit_derivations