config_get_settings

What config_get_settings does on Aapanel

AI agents call config_get_settings to retrieve information from Aapanel without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why config_get_settings is rated Low

This tool retrieves configuration settings from the aaPanel system without modifying, executing, or deleting anything. It is a straightforward read operation. While configuration data may be sensitive, the tool itself performs no dangerous actions. Severity is low because reading settings poses minimal direct risk, though an agent could learn system details for further attacks.

From the tool's definition Tool name 'config_get_settings' and description 'Get panel configuration settings' indicate data retrieval with no modification. The verb 'get' is characteristic of read operations.

The rule that runs config_get_settings safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For config_get_settings, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "config_get_settings": {}
  }
}

Questions about config_get_settings