getUsersByUsernames

What getUsersByUsernames does on Xdevplatform/xmcp

AI agents call getUsersByUsernames to retrieve information from Xdevplatform/xmcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why getUsersByUsernames is rated Low

This tool retrieves user profile information based on usernames. It performs a read-only query operation that returns existing data without modifying, deleting, or executing any actions. The retrieval of user profiles is a standard informational operation with minimal security risk—the severity is low because user profile data is typically meant to be discoverable and public-facing.

From the tool's definition Tool name 'getUsersByUsernames' and description 'Retrieve multiple users profile information by their usernames' indicate a data retrieval operation with no side effects.

The rule that runs getUsersByUsernames safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Xdevplatform/xmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For getUsersByUsernames, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "getUsersByUsernames": {}
  }
}

Questions about getUsersByUsernames