enable_modsecurity

What enable_modsecurity does on cPanel MCP Server

AI agents use enable_modsecurity to create or update resources in cPanel MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your cPanel MCP Server environment.

Why enable_modsecurity is rated Medium

This tool creates or modifies security configurations (enabling a WAF globally) but the change is reversible—ModSecurity can be disabled if needed. It does not execute arbitrary code, delete data, or move money. While it affects security posture broadly, the primary action is configuration Write rather than Execute, since it applies a predefined security module rather than running dynamic code.

From the tool's definition Tool name 'enable_modsecurity' and description 'Enable ModSecurity (WAF) for all domains' indicate configuration modification. ModSecurity is a Web Application Firewall that when enabled modifies server security settings across all domains.

The rule that runs enable_modsecurity safely

PolicyLayer is an MCP gateway: it sits between your AI agents and cPanel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For enable_modsecurity, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "enable_modsecurity": {
      "limits": [
        {
          "counter": "enable_modsecurity_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about enable_modsecurity