fs_list_files

What fs_list_files does on LocalAnt

AI agents call fs_list_files to retrieve information from LocalAnt without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why fs_list_files is rated Low

This tool performs a directory listing operation, which is a non-destructive query that retrieves information about files without side effects. It does not create, modify, delete, or execute anything. The allowlist restriction further limits blast radius by constraining which directories can be accessed. Severity is low because even with unrestricted use, directory listing poses minimal risk to system integrity.

From the tool's definition Tool name 'fs_list_files' and description 'List files in a directory inside the allowlist' indicate a read-only operation that retrieves directory contents without modifying, deleting, or executing anything.

The rule that runs fs_list_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and LocalAnt, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For fs_list_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "fs_list_files": {}
  }
}

Questions about fs_list_files