config_get_api_config

What config_get_api_config does on Aapanel

AI agents call config_get_api_config to retrieve information from Aapanel without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why config_get_api_config is rated Low

This tool queries and retrieves existing API configuration settings. It performs a read-only operation that returns data without altering, executing, or destroying anything. The use of 'get' in both name and description clearly indicates a retrieval action. Severity is low because exposure of API configuration could inform an attacker but is unlikely to cause immediate damage without further exploitation.

From the tool's definition Tool name contains 'get' and description states 'Get API interface configuration' — retrieves configuration data with no modifications or side effects.

The rule that runs config_get_api_config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For config_get_api_config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "config_get_api_config": {}
  }
}

Questions about config_get_api_config