list_courses

What list_courses does on Webcake Storefront

AI agents call list_courses to retrieve information from Webcake Storefront without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_courses is rated Low

This tool queries and retrieves a list of courses from the WebCake Storefront's Course app. It performs no creation, modification, deletion, execution, or financial operations. The blast radius of misuse is minimal—an unauthorized listing merely exposes existing course data, which is a read-only informational operation typical of storefront management systems.

From the tool's definition Tool name 'list_courses' and description 'List courses' indicate a retrieval operation with no modification or side effects. The verb 'list' is explicitly enumerated as a Read operation in the classification rules.

The rule that runs list_courses safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_courses, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_courses": {}
  }
}

Questions about list_courses